, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:29 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100), 0x618) r9 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r9, 0x0) sendto$inet6(r9, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) 22:54:29 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x2, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:54:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) r3 = dup(0xffffffffffffffff) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:30 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x4, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 419.552278][ T27] audit: type=1804 audit(1580770470.205:54): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/26/file0/bus/bus" dev="overlay" ino=39675 res=1 22:54:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) r3 = dup(0xffffffffffffffff) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) [ 420.682522][ T27] audit: type=1804 audit(1580770471.335:55): pid=10393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/27/file0/bus/bus" dev="overlay" ino=39964 res=1 22:54:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:31 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x300, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:54:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) r3 = dup(0xffffffffffffffff) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100), 0x618) r9 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r9, 0x0) sendto$inet6(r9, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) 22:54:31 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2, 0x0, &(0x7f0000000000)=0x5c) 22:54:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100), 0x618) r9 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r9, 0x0) sendto$inet6(r9, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 421.231735][ T27] audit: type=1804 audit(1580770471.885:56): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/28/file0/bus/bus" dev="overlay" ino=39803 res=1 22:54:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 421.462518][ T27] audit: type=1804 audit(1580770472.115:57): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/34/file0/bus/bus" dev="overlay" ino=40057 res=1 [ 421.720451][ T27] audit: type=1804 audit(1580770472.375:58): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/29/file0/bus/bus" dev="overlay" ino=40126 res=1 [ 423.335423][ T317] tipc: TX() has been purged, node left! [ 424.181622][T10458] IPVS: ftp: loaded support on port[0] = 21 [ 424.849829][T10458] chnl_net:caif_netlink_parms(): no params data found [ 425.250005][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.257128][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.265577][T10458] device bridge_slave_0 entered promiscuous mode [ 425.275444][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.282958][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.291766][T10458] device bridge_slave_1 entered promiscuous mode [ 425.313849][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.325598][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.346006][T10458] team0: Port device team_slave_0 added [ 425.354361][T10458] team0: Port device team_slave_1 added [ 425.372647][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.379849][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.405835][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.420923][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.427899][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.454586][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.511642][T10458] device hsr_slave_0 entered promiscuous mode [ 425.548900][T10458] device hsr_slave_1 entered promiscuous mode [ 425.588482][T10458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.596080][T10458] Cannot create hsr debugfs directory [ 425.793358][T10458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.817083][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.825590][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.836980][T10458] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.930649][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.940567][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.949182][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.956233][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.964448][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.973186][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.981982][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.989099][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.997167][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 426.012052][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.030145][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.047077][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.056064][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.066276][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.074863][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.084195][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.181927][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.190338][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.205371][T10458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.237132][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.245786][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.264576][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.341789][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.366265][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.375858][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.384015][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.477492][T10458] device veth0_vlan entered promiscuous mode [ 426.494450][T10458] device veth1_vlan entered promiscuous mode [ 426.530246][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.539810][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.555797][T10458] device veth0_macvtap entered promiscuous mode [ 426.566920][T10458] device veth1_macvtap entered promiscuous mode [ 426.588191][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.599164][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.609486][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.620727][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.630928][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.641573][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.651764][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.662243][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.672360][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.682820][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.692740][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.703213][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.714254][T10458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.722424][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.731726][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.740132][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.748838][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.763200][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 426.774068][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.783983][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 426.794976][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.804926][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 426.815944][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.825849][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 426.836331][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.847065][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 426.857624][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.867498][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 426.878041][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.889807][T10458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.899916][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.915051][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:54:38 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) write(r2, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000200020423df020000", 0xb9) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) r5 = socket(0x1000000010, 0x1, 0xc) write(r5, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_enter(r7, 0x3, 0x0, 0x0, 0x0, 0x3a) r8 = socket(0x3, 0x80000, 0xf0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'vlan0\x00'}, 0x263) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = socket(0x40000000002, 0x3, 0x2) bind$rds(r10, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000180)={r9}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xd490010}, 0x2b4, &(0x7f0000000600)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESOCT=r12, @ANYBLOB="040028bd7000fddbdf25099a82d5b1b4dfee8bce8bc949b59f961b0000000800046369875e2ece272d60fa4ea46f4d88f26d267df1de3d3cd1d794231207ed558c8bd03384a45f4d67aab0e2fd9c6e8a662e01e578fb429b4ede090a550d0c5695652e1348d6275b31ee5bafbbba0840c8714a937d23fca39a0dc5b750420dcce72bfba81264d0437f4aaa0995887c4542e057eb"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$IPVS_CMD_GET_SERVICE(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="fa2201f204b1f4f94c2279e4", @ANYRES16=r12, @ANYBLOB="080039bd7000ffdbdf25040000000c00010008000900510000004000020014000100fe8000000000000000000000000000bb080003000300000008000700ff00000008000e004e240000080002004e24000008000400fe0000000800050008000000"], 0x3}, 0x1, 0x0, 0x0, 0x200008c1}, 0x14000) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) r15 = fcntl$dupfd(r13, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_DEST(r15, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9040000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="7c3f27010d661fab9854c56a4a0d74f311e75ed89eed4fc00dad5b6e1412e6d9b9566d6dcae9b9a64a4f919f1794600fa8b5bc5c3b008fbbe688ce9bbb1a2d73c7ffb455eb50e5348cf1aef26716e6b41cbe3d33aec06136c2a7e274dd4f845af44bdc5d8c62763c1396682f6ac5341b3fc91679da0a021ebe6a12c9803a8573e993168ef2392808962fbdc51a4ca4f8", @ANYRES16=r12, @ANYBLOB="08002bbd7000fddbdf2507000300000000000000020064756d6d793000000000000000000000080004000000f8ff070003000400000014000600fe800000000000000000000000000025080003000400000014000600000000000000000000000000000000000800040085b4000014000600ff02000000000000000000000000000128000100080009007e0000000c0006006e6f6e65000000000800060072720000080002003d000000380001000800080001000000080004004e24000014000300ac1414bb00000000000000000000000008000500000000000800090072000000140001000800090054000000080004004e20000054000100080002002e0000000c0007000000000001000000080004004e200000080002002c0000000800090067000000080002002f000000080009001b00000008000500010000000c00070013000000020000002c0a010008000b00736970000800090041000000080005000000000008000100000000000800020000000000"], 0x3}, 0x1, 0x0, 0x0, 0xa040091}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001180)={&(0x7f00000010c0), 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="7000fbdbdf250200000008000500090000ba00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40002) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r12, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000001580)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="000129bd7000fcdbcf2509000000080005000200000008000400040025008d030000"], 0x3}, 0x1, 0x0, 0x0, 0xc0884}, 0x4008040) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r12, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r16 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r16, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYPTR, @ANYRESHEX=r16, @ANYRES32=r11, @ANYPTR=&(0x7f0000001400)=ANY=[@ANYRESDEC], @ANYPTR, @ANYPTR64=&(0x7f0000001440)=ANY=[@ANYRESHEX], @ANYRES64=r2, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0xa}, 0x1, 0x0, 0x0, 0x24044804}, 0x9850) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="004425bd7000fddbdf2503000006000001807400ccf4c9a16e42bab8d98f99bc8e200280080005000b0d000050000280"], 0x104}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r17 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r17, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r17, 0xae80, 0x0) ioctl$KVM_RUN(r17, 0xae80, 0x0) 22:54:38 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3, 0x0, &(0x7f0000000000)=0x5c) 22:54:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100), 0x618) r9 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r9, 0x0) 22:54:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:38 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4, 0x0, &(0x7f0000000000)=0x5c) 22:54:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100), 0x618) socket$inet6(0xa, 0x1, 0x8010000400000084) [ 427.693137][ T317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.796277][ T317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.822686][ T317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.836397][ T317] batman_adv: batadv0: Removing interface: batadv_slave_1 22:54:38 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x5, 0x0, &(0x7f0000000000)=0x5c) [ 427.856553][ T317] device bridge_slave_1 left promiscuous mode [ 427.881961][ T27] audit: type=1804 audit(1580770478.515:59): pid=10499 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/30/file0/bus/bus" dev="overlay" ino=40607 res=1 [ 427.941889][ T317] bridge0: port 2(bridge_slave_1) entered disabled state 22:54:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:38 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x6, 0x0, &(0x7f0000000000)=0x5c) [ 428.017014][ T27] audit: type=1804 audit(1580770478.575:60): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/35/file0/bus/bus" dev="overlay" ino=41097 res=1 [ 428.066495][ T317] device bridge_slave_0 left promiscuous mode [ 428.097428][ T317] bridge0: port 1(bridge_slave_0) entered disabled state 22:54:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100), 0x618) [ 428.335976][ T317] device veth1_macvtap left promiscuous mode [ 428.373260][ T317] device veth0_macvtap left promiscuous mode [ 428.389236][T10519] overlayfs: failed to resolve './bus': -2 [ 428.438921][ T317] device veth1_vlan left promiscuous mode [ 428.460337][ T317] device veth0_vlan left promiscuous mode [ 429.617588][ T0] NOHZ: local_softirq_pending 08 [ 432.420384][ T317] device hsr_slave_0 left promiscuous mode [ 432.478600][ T317] device hsr_slave_1 left promiscuous mode [ 432.547926][ T317] team0 (unregistering): Port device team_slave_1 removed [ 432.561197][ T317] team0 (unregistering): Port device team_slave_0 removed [ 432.577292][ T317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.635572][ T317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.736129][ T317] bond0 (unregistering): Released all slaves 22:54:43 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) write(r2, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000200020423df020000", 0xb9) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) r5 = socket(0x1000000010, 0x1, 0xc) write(r5, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_enter(r7, 0x3, 0x0, 0x0, 0x0, 0x3a) r8 = socket(0x3, 0x80000, 0xf0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'vlan0\x00'}, 0x263) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = socket(0x40000000002, 0x3, 0x2) bind$rds(r10, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000180)={r9}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xd490010}, 0x2b4, &(0x7f0000000600)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESOCT=r12, @ANYBLOB="040028bd7000fddbdf25099a82d5b1b4dfee8bce8bc949b59f961b0000000800046369875e2ece272d60fa4ea46f4d88f26d267df1de3d3cd1d794231207ed558c8bd03384a45f4d67aab0e2fd9c6e8a662e01e578fb429b4ede090a550d0c5695652e1348d6275b31ee5bafbbba0840c8714a937d23fca39a0dc5b750420dcce72bfba81264d0437f4aaa0995887c4542e057eb"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$IPVS_CMD_GET_SERVICE(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="fa2201f204b1f4f94c2279e4", @ANYRES16=r12, @ANYBLOB="080039bd7000ffdbdf25040000000c00010008000900510000004000020014000100fe8000000000000000000000000000bb080003000300000008000700ff00000008000e004e240000080002004e24000008000400fe0000000800050008000000"], 0x3}, 0x1, 0x0, 0x0, 0x200008c1}, 0x14000) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) r15 = fcntl$dupfd(r13, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_DEST(r15, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9040000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="7c3f27010d661fab9854c56a4a0d74f311e75ed89eed4fc00dad5b6e1412e6d9b9566d6dcae9b9a64a4f919f1794600fa8b5bc5c3b008fbbe688ce9bbb1a2d73c7ffb455eb50e5348cf1aef26716e6b41cbe3d33aec06136c2a7e274dd4f845af44bdc5d8c62763c1396682f6ac5341b3fc91679da0a021ebe6a12c9803a8573e993168ef2392808962fbdc51a4ca4f8", @ANYRES16=r12, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0xa040091}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001180)={&(0x7f00000010c0), 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="7000fbdbdf250200000008000500090000ba00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40002) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r12, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000001580)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="000129bd7000fcdbcf2509000000080005000200000008000400040025008d030000"], 0x3}, 0x1, 0x0, 0x0, 0xc0884}, 0x4008040) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r12, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r16 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r16, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYPTR, @ANYRESHEX=r16, @ANYRES32=r11, @ANYPTR=&(0x7f0000001400)=ANY=[@ANYRESDEC], @ANYPTR, @ANYPTR64=&(0x7f0000001440)=ANY=[@ANYRESHEX], @ANYRES64=r2, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0xa}, 0x1, 0x0, 0x0, 0x24044804}, 0x9850) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="004425bd7000fddbdf2503000006000001807400ccf4c9a16e42bab8d98f99bc8e200280080005000b0d000050000280"], 0x104}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r17 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r17, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r17, 0xae80, 0x0) ioctl$KVM_RUN(r17, 0xae80, 0x0) 22:54:43 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x7, 0x0, &(0x7f0000000000)=0x5c) 22:54:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x2, 0x7c, 0x0, 0x1, 0x7, [0x0, 0x0, 0x0, 0x400100]}, 0x3c) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x10002, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x8, 0xff, 0x0, 0x40}, r1, 0x10, r0, 0x2) perf_event_open(&(0x7f0000000440)={0x6, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10000, 0x45}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) syz_open_procfs(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0xab9535e9a6578fc1}, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xffffffffffffffff}}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x40}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x41}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000040100000400000010000000000000000901f435862b65eb5f438652fe5cb0bb75674d6fac906eb85d6ba98515685b85127548e633b0f017858c2432fc7aba23c169c97a946e5bcf5f3cf68846bef4b75b54e43fb0be1c6d721abd9bc741897dd992163e18018a1ac8ee21a38450372272f278cafac6dd437e6e5181b26443021d482985b84e2471df609965c6dceff3980d349b6640820613ad0fd9e8a256e8e95f312ebebcac0b2fd9da315f475136f3df8c0dea0738e51a3d74cc3dbf1d10fc484da70cee896f1c60cb22435239005f2582935fa63a0c1359506ab5074eaa58dc0b35a7a386875cea6b3e632dc8f05ca3c6ceac98fdb843d5f3c363a7728eda54d18863a0c528d34cb20fe67bb04fad3129fb2471c53113a50004dc230f606bea4aa76fdab024a8d27d54a025c706fdeedaf699059e2335f9dc6ebdf2d49a10afb11323b4e695966db3fc4dbff96d8ab490564b9a4844e340b08bd303a41c2f2315debdea903d65b8a92e13b449275fb64fc78d0e376f539809b8df0ecb6511a4a2b246dbb4a89fcbb627adad0eaaf91f1aae1124301b3b973908603be79215e7c2998e54fd86ec891a9a47cc1bc5c8e8c8ba0500f7cd609eb5f18077e2567ac72cd901ac5d0ab2cf97128ec04775eae1f95ee25ac06d377e145a75d6cb"], 0x20}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001540)="8b0ed76f318e5fde99cb6029483b7ab0854de743ef27a3e18b3ba4278df46e2eadcbd2b81776c64e460024c3f0ff2734ce16f3da8f66cd8ff01adacddb43399d779d3f143e8cf31f2a972be6b0e1ee21817a8a370193e8de7fd57dd4a60ed010c7c00f7c9fae30755b81fc1e900669d2f85acb860049cfb3fb513da0347905d284f47501367867ca64940b03c7565a111d97f386d46eb21cbc", 0x99}, {&(0x7f0000001600)}, {&(0x7f0000001680)="a7647fe86e3b24f0887922a53ff2555dc1c5d64acc43cb18a00edf98db9c72413604b0fe97d439bc32c47579be20eaa8e33b2634", 0x34}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=[{0x10, 0x0, 0xfff}, {0x40, 0x111, 0x0, "bbf5b28a6c0279a24aa03e08be97f626a006aaa8761a1c7ce4dd953008ebc8821c53bf201047e22baf2e"}, {0x10, 0x0, 0x327}, {0x18, 0x0, 0x8e, "2a106cd0cc56215d"}, {0x28, 0x0, 0x0, "9faeb7df2f5c01900ea4f2ea2305964886"}], 0xa0}}], 0x3, 0x0) 22:54:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) 22:54:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:43 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x8, 0x0, &(0x7f0000000000)=0x5c) [ 433.213839][T10538] overlayfs: failed to resolve './bus': -2 22:54:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 22:54:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:44 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x9, 0x0, &(0x7f0000000000)=0x5c) 22:54:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x2, 0x7c, 0x0, 0x1, 0x7, [0x0, 0x0, 0x0, 0x400100]}, 0x3c) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x10002, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x8, 0xff, 0x0, 0x40}, r1, 0x10, r0, 0x2) perf_event_open(&(0x7f0000000440)={0x6, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10000, 0x45}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) syz_open_procfs(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0xab9535e9a6578fc1}, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xffffffffffffffff}}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x40}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x41}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x20}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001540)="8b0ed76f318e5fde99cb6029483b7ab0854de743ef27a3e18b3ba4278df46e2eadcbd2b81776c64e460024c3f0ff2734ce16f3da8f66cd8ff01adacddb43399d779d3f143e8cf31f2a972be6b0e1ee21817a8a370193e8de7fd57dd4a60ed010c7c00f7c9fae30755b81fc1e900669d2f85acb860049cfb3fb513da0347905d284f47501367867ca64940b03c7565a111d97f386d46eb21cbc", 0x99}, {&(0x7f0000001600)}, {&(0x7f0000001680)="a7647fe86e3b24f0887922a53ff2555dc1c5d64acc43cb18a00edf98db9c72413604b0fe97d439bc32c47579be20eaa8e33b2634", 0x34}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=[{0x10, 0x0, 0xfff}, {0x40, 0x111, 0x0, "bbf5b28a6c0279a24aa03e08be97f626a006aaa8761a1c7ce4dd953008ebc8821c53bf201047e22baf2e"}, {0x10, 0x0, 0x327}, {0x18, 0x0, 0x8e, "2a106cd0cc56215d"}, {0x28, 0x0, 0x0, "9faeb7df2f5c01900ea4f2ea2305964886"}], 0xa0}}], 0x3, 0x0) 22:54:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:44 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0xa, 0x0, &(0x7f0000000000)=0x5c) 22:54:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) 22:54:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:44 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0xb, 0x0, &(0x7f0000000000)=0x5c) 22:54:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x2, 0x7c, 0x0, 0x1, 0x7, [0x0, 0x0, 0x0, 0x400100]}, 0x3c) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x10002, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x8, 0xff, 0x0, 0x40}, r1, 0x10, r0, 0x2) perf_event_open(&(0x7f0000000440)={0x6, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10000, 0x45}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) syz_open_procfs(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0xab9535e9a6578fc1}, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xffffffffffffffff}}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x40}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x41}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x20}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001540)="8b0ed76f318e5fde99cb6029483b7ab0854de743ef27a3e18b3ba4278df46e2eadcbd2b81776c64e460024c3f0ff2734ce16f3da8f66cd8ff01adacddb43399d779d3f143e8cf31f2a972be6b0e1ee21817a8a370193e8de7fd57dd4a60ed010c7c00f7c9fae30755b81fc1e900669d2f85acb860049cfb3fb513da0347905d284f47501367867ca64940b03c7565a111d97f386d46eb21cbc", 0x99}, {&(0x7f0000001600)}, {&(0x7f0000001680)="a7647fe86e3b24f0887922a53ff2555dc1c5d64acc43cb18a00edf98db9c72413604b0fe97d439bc32c47579be20eaa8e33b2634", 0x34}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=[{0x10, 0x0, 0xfff}, {0x40, 0x111, 0x0, "bbf5b28a6c0279a24aa03e08be97f626a006aaa8761a1c7ce4dd953008ebc8821c53bf201047e22baf2e"}, {0x10, 0x0, 0x327}, {0x18, 0x0, 0x8e, "2a106cd0cc56215d"}, {0x28, 0x0, 0x0, "9faeb7df2f5c01900ea4f2ea2305964886"}], 0xa0}}], 0x3, 0x0) 22:54:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) 22:54:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:45 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0xc, 0x0, &(0x7f0000000000)=0x5c) 22:54:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 22:54:45 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0xd, 0x0, &(0x7f0000000000)=0x5c) 22:54:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) 22:54:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x2, 0x7c, 0x0, 0x1, 0x7, [0x0, 0x0, 0x0, 0x400100]}, 0x3c) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x10002, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x8, 0xff, 0x0, 0x40}, r1, 0x10, r0, 0x2) perf_event_open(&(0x7f0000000440)={0x6, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10000, 0x45}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) syz_open_procfs(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0xab9535e9a6578fc1}, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xffffffffffffffff}}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x40}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x41}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x20}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001540)="8b0ed76f318e5fde99cb6029483b7ab0854de743ef27a3e18b3ba4278df46e2eadcbd2b81776c64e460024c3f0ff2734ce16f3da8f66cd8ff01adacddb43399d779d3f143e8cf31f2a972be6b0e1ee21817a8a370193e8de7fd57dd4a60ed010c7c00f7c9fae30755b81fc1e900669d2f85acb860049cfb3fb513da0347905d284f47501367867ca64940b03c7565a111d97f386d46eb21cbc", 0x99}, {&(0x7f0000001600)}, {&(0x7f0000001680)="a7647fe86e3b24f0887922a53ff2555dc1c5d64acc43cb18a00edf98db9c72413604b0fe97d439bc32c47579be20eaa8e33b2634", 0x34}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=[{0x10, 0x0, 0xfff}, {0x40, 0x111, 0x0, "bbf5b28a6c0279a24aa03e08be97f626a006aaa8761a1c7ce4dd953008ebc8821c53bf201047e22baf2e"}, {0x10, 0x0, 0x327}, {0x18, 0x0, 0x8e, "2a106cd0cc56215d"}, {0x28, 0x0, 0x0, "9faeb7df2f5c01900ea4f2ea2305964886"}], 0xa0}}], 0x3, 0x0) 22:54:46 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0xe, 0x0, &(0x7f0000000000)=0x5c) 22:54:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 435.624418][T10650] sock: process `syz-executor.2' is using obsolete getsockopt SO_BSDCOMPAT 22:54:46 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0xf, 0x0, &(0x7f0000000000)=0x5c) 22:54:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) 22:54:46 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) write(r2, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000200020423df020000", 0xb9) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) r5 = socket(0x1000000010, 0x1, 0xc) write(r5, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_enter(r7, 0x3, 0x0, 0x0, 0x0, 0x3a) r8 = socket(0x3, 0x80000, 0xf0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'vlan0\x00'}, 0x263) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = socket(0x40000000002, 0x3, 0x2) bind$rds(r10, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000180)={r9}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xd490010}, 0x2b4, &(0x7f0000000600)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESOCT=r12, @ANYBLOB="040028bd7000fddbdf25099a82d5b1b4dfee8bce8bc949b59f961b0000000800046369875e2ece272d60fa4ea46f4d88f26d267df1de3d3cd1d794231207ed558c8bd03384a45f4d67aab0e2fd9c6e8a662e01e578fb429b4ede090a550d0c5695652e1348d6275b31ee5bafbbba0840c8714a937d23fca39a0dc5b750420dcce72bfba81264d0437f4aaa0995887c4542e057eb"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$IPVS_CMD_GET_SERVICE(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="fa2201f204b1f4f94c2279e4", @ANYRES16=r12, @ANYBLOB="080039bd7000ffdbdf25040000000c00010008000900510000004000020014000100fe8000000000000000000000000000bb080003000300000008000700ff00000008000e004e240000080002004e24000008000400fe0000000800050008000000"], 0x3}, 0x1, 0x0, 0x0, 0x200008c1}, 0x14000) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) r15 = fcntl$dupfd(r13, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_DEST(r15, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9040000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="7c3f27010d661fab9854c56a4a0d74f311e75ed89eed4fc00dad5b6e1412e6d9b9566d6dcae9b9a64a4f919f1794600fa8b5bc5c3b008fbbe688ce9bbb1a2d73c7ffb455eb50e5348cf1aef26716e6b41cbe3d33aec06136c2a7e274dd4f845af44bdc5d8c62763c1396682f6ac5341b3fc91679da0a021ebe6a12c9803a8573e993168ef2392808962fbdc51a4ca4f8", @ANYRES16=r12, @ANYBLOB="08002bbd7000fddbdf2507000300000000000000020064756d6d793000000000000000000000080004000000f8ff070003000400000014000600fe800000000000000000000000000025080003000400000014000600000000000000000000000000000000000800040085b4000014000600ff02000000000000000000000000000128000100080009007e0000000c0006006e6f6e65000000000800060072720000080002003d000000380001000800080001000000080004004e24000014000300ac1414bb00000000000000000000000008000500000000000800090072000000140001000800090054000000080004004e20000054000100080002002e0000000c0007000000000001000000080004004e200000080002002c0000000800090067000000080002002f000000080009001b00000008000500010000000c00070013000000020000002c0a010008000b00736970000800090041000000080005000000000008000100000000000800020000000000"], 0x3}, 0x1, 0x0, 0x0, 0xa040091}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001180)={&(0x7f00000010c0), 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="7000fbdbdf250200000008000500090000ba00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40002) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r12, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000001580)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="000129bd7000fcdbcf2509000000080005000200000008000400040025008d030000"], 0x3}, 0x1, 0x0, 0x0, 0xc0884}, 0x4008040) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r12, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r16 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r16, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYPTR, @ANYRESHEX=r16, @ANYRES32=r11, @ANYPTR=&(0x7f0000001400)=ANY=[@ANYRESDEC], @ANYPTR, @ANYPTR64=&(0x7f0000001440)=ANY=[@ANYRESHEX], @ANYRES64=r2, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0xa}, 0x1, 0x0, 0x0, 0x24044804}, 0x9850) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="004425bd7000fddbdf2503000006000001807400ccf4c9a16e42bab8d98f99bc8e200280080005000b0d000050000280"], 0x104}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r17 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r17, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r17, 0xae80, 0x0) ioctl$KVM_RUN(r17, 0xae80, 0x0) 22:54:46 executing program 5: ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f000012afe4)={0xa, 0xe22, 0x0, @empty}, 0x1c) r0 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@mcast1}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0x68, 0x29, 0x1, {0x3028ee18, [{{0x4, 0x4, 0x8}, 0x6, 0x2, 0x7, './file0'}, {{0x40, 0x3}, 0x6, 0x8, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0x4, 0xe1, 0x7, './file0'}]}}, 0x68) getdents(r3, &(0x7f00000005c0)=""/223, 0xfc61) 22:54:46 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, &(0x7f0000000000)=0x5c) [ 436.127865][ T27] audit: type=1804 audit(1580770486.775:61): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/36/file0/bus/bus" dev="overlay" ino=42103 res=1 22:54:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xba, 0xfe, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6808}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setpgid(0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket(0x28, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x100}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 22:54:47 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)=0x5c) 22:54:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) 22:54:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:54:47 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x12, 0x0, &(0x7f0000000000)=0x5c) 22:54:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:54:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) 22:54:47 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x13, 0x0, &(0x7f0000000000)=0x5c) [ 437.302736][ T27] audit: type=1804 audit(1580770487.955:62): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/37/file0/bus/bus" dev="overlay" ino=42149 res=1 22:54:48 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x14, 0x0, &(0x7f0000000000)=0x5c) 22:54:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x10, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={r4, 0xb0, "fb648159b91efef27330693ed23b466666e1767c5638cc069910eb7cdd6fd735e80f1ceb88fc86c49124dbdb32d59e45380a78a392c89231354c300c25af06a5cc8be7d03868de134ede5a9fa41cc718b07859f03731eb9b172b301fad4828e7853a72de55132ea47606a765e8b69e776326bd247e16a45ee203cc4013bbfd4d17cedd8a965048bfc6cc6a7f70bf9b285bfe39b44968c3189bba7dc5267785a088ae82ee7cbc335c06e0daf8d4ed7fe9"}, &(0x7f0000000100)=0xb8) fcntl$notify(0xffffffffffffffff, 0x402, 0x800010000000003d) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@any, 0x8001}) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000de6299eb6284070000000000fd85d19879bad40ad2c03454024c94920005000000000000000000d94bfeadbf53834ab7eb07d24842000000ea00000000000009931fc0e3f42ce00000000005000000000000000000f5ffffff000000000000ee010000000100000000402000"], 0xb8}}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000580)={0x5, 0x6, 0x1ff, 0x1000, 0x200, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x6500) 22:54:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:54:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r1, &(0x7f0000000180)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r3 = dup(r1) sendfile(r3, r2, 0x0, 0x523) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="feff8e3d94bddf0a9038d00d5873ea94b080374007242f79399a169a7f15919be87aeaa6f8a2a5f2ddd056c541ae4d207b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdcac52f68e1dc6591ed99038eeb64128991db28631fe311be9ffd0c2ec24250df97fcbd8a8643e7e9f3d9af21673bc8fb4fbec843e04160836bd232acf4e8f635b3b4f82015cfcd0455e1d1932530511e0fc274c285f6b22eba06aed2dc97c91e7784205f", @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYRESOCT, @ANYRES16, @ANYRES64=r0, @ANYRES16], @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 438.005323][ T27] audit: type=1804 audit(1580770488.655:63): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/7/file0/bus/bus" dev="overlay" ino=41827 res=1 22:54:48 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x15, 0x0, &(0x7f0000000000)=0x5c) 22:54:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x10, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={r4, 0xb0, "fb648159b91efef27330693ed23b466666e1767c5638cc069910eb7cdd6fd735e80f1ceb88fc86c49124dbdb32d59e45380a78a392c89231354c300c25af06a5cc8be7d03868de134ede5a9fa41cc718b07859f03731eb9b172b301fad4828e7853a72de55132ea47606a765e8b69e776326bd247e16a45ee203cc4013bbfd4d17cedd8a965048bfc6cc6a7f70bf9b285bfe39b44968c3189bba7dc5267785a088ae82ee7cbc335c06e0daf8d4ed7fe9"}, &(0x7f0000000100)=0xb8) fcntl$notify(0xffffffffffffffff, 0x402, 0x800010000000003d) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@any, 0x8001}) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000de6299eb6284070000000000fd85d19879bad40ad2c03454024c94920005000000000000000000d94bfeadbf53834ab7eb07d24842000000ea00000000000009931fc0e3f42ce00000000005000000000000000000f5ffffff000000000000ee010000000100000000402000"], 0xb8}}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000580)={0x5, 0x6, 0x1ff, 0x1000, 0x200, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x6500) [ 438.627042][ T27] audit: type=1804 audit(1580770489.275:64): pid=10753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/38/file0/bus/bus" dev="overlay" ino=41866 res=1 22:54:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:54:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r6, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 22:54:49 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000000)=0x5c) 22:54:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:54:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:54:50 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000000)=0x5c) [ 439.593681][ T27] audit: type=1804 audit(1580770490.245:65): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/39/file0/bus/bus" dev="overlay" ino=41880 res=1 22:54:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r6 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r6, 0x0) 22:54:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x10, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={r4, 0xb0, "fb648159b91efef27330693ed23b466666e1767c5638cc069910eb7cdd6fd735e80f1ceb88fc86c49124dbdb32d59e45380a78a392c89231354c300c25af06a5cc8be7d03868de134ede5a9fa41cc718b07859f03731eb9b172b301fad4828e7853a72de55132ea47606a765e8b69e776326bd247e16a45ee203cc4013bbfd4d17cedd8a965048bfc6cc6a7f70bf9b285bfe39b44968c3189bba7dc5267785a088ae82ee7cbc335c06e0daf8d4ed7fe9"}, &(0x7f0000000100)=0xb8) fcntl$notify(0xffffffffffffffff, 0x402, 0x800010000000003d) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@any, 0x8001}) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000de6299eb6284070000000000fd85d19879bad40ad2c03454024c94920005000000000000000000d94bfeadbf53834ab7eb07d24842000000ea00000000000009931fc0e3f42ce00000000005000000000000000000f5ffffff000000000000ee010000000100000000402000"], 0xb8}}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000580)={0x5, 0x6, 0x1ff, 0x1000, 0x200, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x6500) [ 439.962128][ T27] audit: type=1804 audit(1580770490.615:66): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/8/file0/bus/bus" dev="overlay" ino=42411 res=1 22:55:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:22 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x5c) 22:55:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) 22:55:22 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1d, 0x0, &(0x7f0000000000)=0x5c) 22:55:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) socket$inet6(0xa, 0x1, 0x8010000400000084) 22:55:22 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, 0x0, &(0x7f0000000000)=0x5c) 22:55:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) 22:55:22 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x22, 0x0, &(0x7f0000000000)=0x5c) 22:55:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) [ 472.233531][ T27] audit: type=1804 audit(1580770522.885:67): pid=10825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/40/file0/bus/bus" dev="overlay" ino=43069 res=1 22:55:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:23 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x23, 0x0, &(0x7f0000000000)=0x5c) 22:55:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r5, 0x0) [ 472.834337][ T27] audit: type=1804 audit(1580770523.485:68): pid=10836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/45/bus/bus" dev="overlay" ino=16741 res=1 [ 473.070291][ T27] audit: type=1804 audit(1580770523.725:69): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/41/file0/bus/bus" dev="overlay" ino=43095 res=1 [ 473.433161][T10836] syz-executor.5 (10836) used greatest stack depth: 22904 bytes left [ 473.941786][ T27] audit: type=1804 audit(1580770524.595:70): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/9/file0/bus/bus" dev="overlay" ino=43100 res=1 22:55:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:25 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x24, 0x0, &(0x7f0000000000)=0x5c) 22:55:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) 22:55:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:25 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x25, 0x0, &(0x7f0000000000)=0x5c) [ 474.814461][ T27] audit: type=1804 audit(1580770525.465:71): pid=10869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/42/file0/bus/bus" dev="overlay" ino=42619 res=1 22:55:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) 22:55:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_RUN(r0, 0xae80, 0x0) 22:55:38 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x26, 0x0, &(0x7f0000000000)=0x5c) [ 487.934358][ T27] audit: type=1804 audit(1580770525.465:72): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/10/file0/bus/bus" dev="overlay" ino=43170 res=1 22:55:38 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r4, 0x0) 22:55:38 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x27, 0x0, &(0x7f0000000000)=0x5c) 22:55:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 488.447080][ T27] audit: type=1804 audit(1580770539.095:73): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/47/file0/bus/bus" dev="overlay" ino=42662 res=1 22:55:39 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x28, 0x0, &(0x7f0000000000)=0x5c) 22:55:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) 22:55:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 489.405710][ T27] audit: type=1804 audit(1580770540.055:74): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/11/file0/bus/bus" dev="overlay" ino=42688 res=1 [ 490.068821][ T27] audit: type=1804 audit(1580770540.715:75): pid=10921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/43/file0/bus/bus" dev="overlay" ino=43328 res=1 22:55:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:41 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x29, 0x0, &(0x7f0000000000)=0x5c) 22:55:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) 22:55:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:55:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 22:55:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) 22:55:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:55:41 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2a, 0x0, &(0x7f0000000000)=0x5c) 22:55:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) [ 491.195642][ T27] audit: type=1804 audit(1580770541.845:76): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/48/file0/bus/bus" dev="overlay" ino=43367 res=1 22:55:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:55:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:42 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2b, 0x0, &(0x7f0000000000)=0x5c) 22:55:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) 22:55:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:42 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2c, 0x0, &(0x7f0000000000)=0x5c) 22:55:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:55:42 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2d, 0x0, &(0x7f0000000000)=0x5c) [ 492.240157][ T27] audit: type=1804 audit(1580770542.895:77): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/49/file0/bus/bus" dev="overlay" ino=43412 res=1 22:55:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 22:55:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x523) 22:55:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:43 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2e, 0x0, &(0x7f0000000000)=0x5c) 22:55:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x523) 22:55:43 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:55:43 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2f, 0x0, &(0x7f0000000000)=0x5c) 22:55:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 493.198959][T11002] overlayfs: failed to resolve './file0': -2 22:55:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x523) 22:55:44 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x30, 0x0, &(0x7f0000000000)=0x5c) 22:55:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:55:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = dup(r0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x523) 22:55:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:55:44 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x31, 0x0, &(0x7f0000000000)=0x5c) 22:55:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:44 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000000000)=0x5c) 22:55:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 494.234098][ T27] audit: type=1804 audit(1580770544.885:78): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/16/file0/bus/bus" dev="overlay" ino=43554 res=1 22:55:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = dup(r0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x523) 22:55:45 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x39, 0x0, &(0x7f0000000000)=0x5c) [ 494.358267][ T27] audit: type=1804 audit(1580770544.885:79): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/47/file0/bus/bus" dev="overlay" ino=42971 res=1 22:55:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 494.667155][ T27] audit: type=1804 audit(1580770545.055:80): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/51/file0/bus/bus" dev="overlay" ino=43564 res=1 22:55:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = dup(r0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x523) 22:55:45 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)=0x5c) 22:55:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:45 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3c, 0x0, &(0x7f0000000000)=0x5c) 22:55:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 495.182238][ T27] audit: type=1804 audit(1580770545.835:81): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/17/file0/bus/bus" dev="overlay" ino=44125 res=1 22:55:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:55:46 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000000)=0x5c) 22:55:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 495.797391][ T27] audit: type=1804 audit(1580770546.445:82): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/18/file0/bus/bus" dev="overlay" ino=44272 res=1 22:55:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:46 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3e, 0x0, &(0x7f0000000000)=0x5c) 22:55:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:55:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:46 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x42, 0x0, &(0x7f0000000000)=0x5c) 22:55:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 496.236374][ T27] audit: type=1804 audit(1580770546.885:83): pid=11122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/19/file0/bus/bus" dev="overlay" ino=44363 res=1 22:55:47 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x43, 0x0, &(0x7f0000000000)=0x5c) 22:55:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:55:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:47 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1b6, 0x0, &(0x7f0000000000)=0x5c) [ 496.655733][ T27] audit: type=1804 audit(1580770547.305:84): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/20/file0/bus/bus" dev="overlay" ino=44421 res=1 22:55:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) 22:55:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 496.840792][ T27] audit: type=1804 audit(1580770547.385:85): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/55/file0/bus/bus" dev="overlay" ino=44422 res=1 22:55:47 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000580)={0x800, 0xff, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="dd0400000000000000001200000004000180"], 0x18}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000500)={0xf000000, 0x2, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x980908, 0x1, [], @value=0x1}}) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000540)) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3c0, r2, 0x604, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5a0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6dc}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x71, @rand_addr="7e089c39566d5cb0e3203c6a3f943a48", 0x800}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x2, 0x4, @mcast1, 0x8}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x878}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc00c}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x764}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x67a76c45}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0xc080}, 0x4040) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:55:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r1 = dup(0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x523) [ 497.162706][ T27] audit: type=1804 audit(1580770547.815:86): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/56/file0/bus/bus" dev="overlay" ino=44463 res=1 22:55:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) 22:55:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:48 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000140)=""/165, &(0x7f00000000c0)=0xa5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28c800, 0xd3) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x8, 0xfffffffe, 0x9}, 0xc) 22:55:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r1 = dup(0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x523) 22:55:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 497.603670][ T27] audit: type=1804 audit(1580770548.255:87): pid=11189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/57/file0/bus/bus" dev="overlay" ino=44514 res=1 22:55:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:48 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)="2f356fe72f04d5a5caef681c82479127ef0825da6e0e0a56ec69b2c30ff932ed3d01e08d55080bb1d93ac3a65407085de62fd44b01e26f06b93984848448ac5acfbebfbc8bb1cc04234f519ea172f211c5e5e2146d346d866e599efac6d83361388f780d133a40aa7d818915df8bb97d00e6fb04eba3b4caf4b667f02ec6ce38677722323ae6572790b0d6a03d4c9957af2fda8c9e129c3867603c70f7e2c8dc8782b6bc9a8f034d5ada2ad8dfaa0fcac1af84f7a31e3bf0de45ea3a16f71117d5958f60a769e94e8157facc05b076", 0xcf) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40a000, 0x0) 22:55:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r1 = dup(0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x523) 22:55:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) 22:55:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:55:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:48 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x4, @mcast2, 0x7ff}]}, &(0x7f0000000100)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r6, 0x0, 0x40000, 0x4) fallocate(r5, 0x0, 0x0, 0x10fffe) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xd000000, r6, 0x0, 0x8}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000180)={0x7ff, [0x1, 0x1, 0x20], [{0x63aa20ea, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x0, 0x1}, {0x9, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x40000000, 0x1, 0x0, 0x1, 0x1}, {0xffffffff, 0x3f, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x1}, {0x4, 0x2f, 0x0, 0x0, 0x0, 0x1}, {0x5, 0xaf, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x6, 0x1, 0x1}, {0x3, 0x5, 0x0, 0x1, 0x1}, {0x6, 0x3ff, 0x1, 0x1, 0x1}], 0x9}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xea79, @loopback, 0xdb1, 0x204}, 0x20) 22:55:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:55:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:55:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 499.152100][T11255] overlayfs: failed to resolve './file0': -2 22:55:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:50 executing program 2: r0 = socket(0x21, 0xa, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000180)}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'lo\x00', {}, 0x4}) 22:55:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:55:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:50 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4101, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x3ff, 0x2) 22:55:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 499.784020][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 499.784035][ T27] audit: type=1804 audit(1580770550.435:93): pid=11279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/25/file0/bus/bus" dev="overlay" ino=44879 res=1 [ 499.861721][T11288] overlayfs: failed to resolve './file0': -2 22:55:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:50 executing program 2: socket(0x20000000000000a, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 22:55:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:55:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:55:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:51 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/vcsu\x00', 0x280081, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x2db) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) sendmmsg(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="695ff3ff2b5d311c85394c3f54da6bb35b8019bb9548952d9f897b330a1988b0d1dd6550dd10b9866574f679", 0x2c}, {&(0x7f0000000100)="a8ab6dc21a1a78b57d77e13a130e5ba05927ebf354d7e6eaf7f1a552bc7157bddd965daefee3a3b6e0c56aa6631ef73c5369d27784222b566eb47e63093059cce4f1c57593ffd43ce8269ce87c03b98cbb7b24e38d4ca4faa7d3fd6238eedc594c8412589296cca01b18f219f09b1417653ba4eec2fac234eae7f40bbbcec6", 0x7f}], 0x2, &(0x7f00000001c0)=[{0xb8, 0x10a, 0x0, "3ea41a52266c6b781da04c788d0f95b9b667a8305a97ff9aafe3871b125ecfa4ffe99be69c9560fb493e36acbf763f4e72716561baffdeebc93f3db235246cb3c034077feba13222f463b7dec72c000621b96ba78e5967e5aeca45e358dba20cf4dea966a247b1b2f16e4b7cdefaf00b9adee98c7864ba081b69dc796dad89a176b26d70705497df45c69a580d86f547ee0c37fe4844b432df610049daf47e3496b46ca447300d18"}, {0xc0, 0x115, 0x3, "aff0de08afca33feaa66a8ee4be43d0783701b6fb7157f36b79e545d392685a5d08b833448903e04fb183f088393959991b0f3204ba4e5edd9ad305c92549e473ffc95569de48087cbeb9f444b1ff0d3ab662d5da26b64de85c1f9314318dda8790db02daed1cadbe376d55b56068abc5014d4e77b08c4a19bbd09679b18ba3106cc706deee1271ebbcf2f35d4e40a7a3b4e9598d881bce4360b54b1040e5102b429ab0c65019713b8cfd98ad2fa"}, {0xf0, 0x118, 0x40, "59c738da4962ab384f1e338d20a44b148a8a2ede1850d4746a524b2ca8691beec4561838ead7b9bc350632bf02ce29cab1d8e6a21b7697f147701163fbe739961949599f4910ecbe02c655ad439c0c6c3e78299866808c562fe5c084b9641f5c215a6363e6b2f032358a30cafdae99d8676b94c6dfccbb7ed80b2f7a35f5a16bfc7adb507330ef5ff104ef5ac5b24354947a8991f2b112741978c83aef3b4a4ea974a4ebd4c471dbc05c76a84c0521a97634fda498249ef13d7953cc72aee0d80e4a335fd641626d677e48a9dfba8dd6f903b02f206caabb3367b1"}, {0xf0, 0x114, 0x8, "8f4340e3ff5c1dcd1d7a4d005a43b36c54db95168482a2e48b45df6e438962e32c323bf160171bfecf1b34aafec721752fff41994a6871c4cc64c253d9fd9f43790ad352561b8a6a5b9f3f5a78164c3f6ac35aef57fa9676e09556cab7fa9f0dc304f1592c1edba9de401439263d3748b0b23470b4b7c3f9c07b065d49130881f2f8f0103700296132d1cce6c3d115d0562345c915cff76456bc1fcdaf5aa1fedd14ff320bea907b7fcf96e930108fbc1777206c091aecdcb6bdb264a4303840e2901a23e3abc7e555e438998db2ac6f44dfe093d5dcad60ea597fe39cba"}], 0x358}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)="ceb757c78beee95ca2e0cdf1873483b80b6336828deae9684ea2f86f1c02015817e838e1fca5f4260af36edb44bca1e24f633ba28e17ab911838", 0x3a}, {&(0x7f0000000580)="050844e74f5d855a61a13574ce46b2f70119b7f924b8b6bcd883d0c2b9f92842a06c307b71872c93fc999638e478db920fa3acd413ffc175af514469c918016815cfbff0ef0e4e46b91f28c5f1f576b2b5ca5891a3d3e480b999dc72008799f4e90253a342d76845d405918b272c58566763425b64a8927c2095", 0x7a}, {&(0x7f0000000600)="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", 0xfb}, {&(0x7f0000000700)="8f2b6ba6632ababa5ee5ce0331bb7b0e394b3b25b0e402b046924bb35ae4eb24f2535f391c8628888e1f18c4b8ca4f0f1d7a180a52dd462f9d86b01e04ef81443f97be89b1bd48f7000cc998fdd199c96413c1ef83a5402a3abb04301718916f451961768330d68bc8fac46c1dffe01b74c7ae6b7501532fa19442dfa5784523942b20773a9cb4ff26e8372c5864e5dc1b78650d122db451da06589b9a441c2a9a3132f5b89da51139ef7b4cfb508f12cb36c42bbc981d74fb3625915d2efb21297a61f668d456ebbb1a738033d195f28f9f4407c3c0b4420645957035e655", 0xdf}, {&(0x7f0000000800)="49b072e54313a49f182dfb355b9c31f8dacc23c2a5a04e29645e7b828626519dbcb7570567fdbe43419aa0659e60c30707fdb506d68ecd5ea644b382ffe5d8524da43b80a4f39f54e0926c7a0db016e8ca11eee6dfba2c6104987d52a7c10fa4140df35431e97175eef6f209810c6c6bef14f0", 0x73}], 0x5, &(0x7f0000000900)=[{0x18, 0x1, 0xffffff2a, "dbf1"}], 0x18}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000940)="851045c1bb31f746dea01afbae727a8207df23ebcf675841efe715e6ff1c2b03a1a3d45f2be4edb0f99c98678b143cdf5ef7e2ceb3d7c584289878f1b461515e5b2e948d33a06399387b0f5a273de543", 0x50}], 0x1, &(0x7f0000000a00)=[{0x30, 0x107, 0xfffffffd, "eb72dc92ed01bd24e387834e773e928f9ecb823a61e858d2912840be0d3ab6"}, {0x28, 0x10b, 0x1, "1bb567dac765ac7f606b21c470d67fef318b5aa5"}, {0x40, 0x119, 0x9, "0390b52bd8488f41d11e098802d0c9860f26cfa7a9df80ae7be108632d87030ebf2aa366d5e68672ee74"}], 0x98}}, {{&(0x7f0000000ac0)=@llc={0x1a, 0x17, 0x1e, 0x1f, 0x9, 0x0, @broadcast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)="d711533eaacf5e892aacd00135a12de40146b130058b38cf4abfdc763ba9029820f54e7e6e672e3a13722a44d116fc9e03d9ba35871f859b", 0x38}, {&(0x7f0000000b80)="1b84e6e36b1db495abf9f09ca43123110d79275cf590a35b6bc453d234f6e4796a", 0x21}, {&(0x7f0000000bc0)="adefaa239370c443091e935be42301298fb38aa8a76511c1591d04c564b800271921355e7f3b82756075bfe803b05f55d94e65e5bedc9298139351209ec4ed6015b9aa3bb2c1c6a1ca43b2a7cff07eedfa35023c884f0056dc68e4f9d7ec6f32817a206b650b16946302c204ef9e7a916f0d8dd3", 0x74}], 0x3, &(0x7f0000000c80)=[{0xd0, 0x119, 0x401, "320fe67979869ea0e9aa133210b7b2b82d36a5355f79cc2e8086d4073be8123db3b2aa7460303f12ba219c7bac193fd5c65914389dbd306f6053011b797f32a58131d4f82b8cb0dc2c5684ecc0eb6232e4345d2893903eacef7deb9226a1b310cd0e677191fa8a8d102a9d91524e5b32a5aaab9d4c454477dda40212ed7cf6dba6365d0152dfb58834ff7b358c30dfe6f002338bbff17c991562c447edf8f60bcc988e7bf8c076490866088c5f52fd0ee5581bd4ea0075b29f46fb922d09"}, {0x70, 0x10f, 0x8d47, "7b94b51c43742dd121c90728f58e84b8830c2edb141ea814da7bfb5456d669da70f0a65da8eeb4835427f2a18d872aff63ea429eb613a5912566aa70c7748e41b3c57d62dae877c140df321e0155cbd8a3e637a2eab9914b78"}], 0x140}}], 0x4, 0x24040000) [ 500.518651][T11313] overlayfs: failed to resolve './file0': -2 22:55:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 500.751175][ T27] audit: type=1804 audit(1580770551.395:94): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/26/file0/bus/bus" dev="overlay" ino=45309 res=1 22:55:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:55:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 501.221797][ T27] audit: type=1804 audit(1580770551.875:95): pid=11331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/64/file0/bus/bus" dev="overlay" ino=44971 res=1 22:56:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:04 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000004971d", @ANYRES16=r3, @ANYBLOB="c18f0000000000003f00200000004926ba66a429f96f47ce9af3e19b4313d8d90e3e4edb1c2245336626f41235bf1a959bd1d4f05fa36dcb9ef824b1856ae4957a38d13933f02d1fd927857a354176d87ea7b53043c9c7ca1728bd06b122b12be160d787d247a1bbe77e386326d9bca3"], 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f0000000040)=r4, 0x4) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) keyctl$chown(0x2, 0x0, 0x0, r8) fchown(r4, r6, r8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r5}) 22:56:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:04 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x705100, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) 22:56:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:56:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:56:04 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 514.267013][ T27] audit: type=1804 audit(1580770564.915:96): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/27/file0/bus/bus" dev="overlay" ino=45392 res=1 22:56:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:56:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:05 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_delroute={0x2c, 0x19, 0x20, 0x70bd2c, 0x25dfdbff, {0x2, 0x80, 0x10, 0xff, 0xfe, 0x0, 0xfe, 0xb, 0x1200}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_FLOW={0x8, 0xb, 0xd0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4004) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:56:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 515.349528][ T27] audit: type=1804 audit(1580770566.005:97): pid=11382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/28/file0/bus/bus" dev="overlay" ino=45482 res=1 [ 516.028430][ T27] audit: type=1804 audit(1580770566.675:98): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/65/file0/bus/bus" dev="overlay" ino=45496 res=1 22:56:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:07 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) read$usbfs(r1, &(0x7f0000000080)=""/4096, 0xffffffffffffffa2) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:56:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:56:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 516.965502][ T27] audit: type=1804 audit(1580770567.615:99): pid=11415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/66/file0/bus/bus" dev="overlay" ino=45555 res=1 22:56:07 executing program 2: getegid() r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x4c041) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x21, 0x4) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:56:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 517.233379][ T27] audit: type=1804 audit(1580770567.875:100): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/29/file0/bus/bus" dev="overlay" ino=46195 res=1 22:56:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:56:20 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 22:56:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @rc={0x1f, @none, 0x5}, @rc={0x1f, @none, 0xff}, @xdp={0x2c, 0xb, r6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x81, &(0x7f00000000c0)='ip6erspan0\x00', 0x4, 0x9, 0x2}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}}, 0x48800) r8 = socket(0x2c, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 529.927599][ T27] audit: type=1804 audit(1580770580.575:101): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/60/file0/bus/bus" dev="overlay" ino=46258 res=1 22:56:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 530.051006][ T27] audit: type=1804 audit(1580770580.645:102): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/60/file0/bus/bus" dev="overlay" ino=46258 res=1 22:56:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:56:20 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x94) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r3, 0x0, 0x40000, 0x4) fallocate(r2, 0x0, 0x0, 0x10fffe) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xd000000, r3, 0x0, 0x8}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0x0, 0x9, 0x4, 0x100000000]}) [ 530.408541][ T27] audit: type=1804 audit(1580770581.055:103): pid=11458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/30/file0/bus/bus" dev="overlay" ino=45664 res=1 22:56:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 530.597175][ T27] audit: type=1804 audit(1580770581.245:104): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/61/file0/bus/bus" dev="overlay" ino=46343 res=1 [ 530.867185][ T27] audit: type=1804 audit(1580770581.435:105): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/61/file0/bus/bus" dev="overlay" ino=46343 res=1 [ 531.075577][ T27] audit: type=1800 audit(1580770581.595:106): pid=11473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16853 res=0 [ 531.464989][ T27] audit: type=1804 audit(1580770582.115:107): pid=11486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/67/file0/bus/bus" dev="overlay" ino=45685 res=1 22:56:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:56:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:22 executing program 2: r0 = socket(0x22, 0x80000, 0x0) r1 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:56:22 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f00000002c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x4, 0x34325241, 0x2, @discrete={0x4, 0x2}}) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r4 = fcntl$dupfd(r3, 0x406, r0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000100)={[], 0x100, 0x1, 0xd8, 0x0, 0x9, 0x10000, 0x5000, [], 0xe0c}) [ 532.406683][ T27] audit: type=1804 audit(1580770583.055:108): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/31/file0/bus/bus" dev="overlay" ino=45718 res=1 22:56:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:56:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 532.636331][ T27] audit: type=1804 audit(1580770583.285:109): pid=11495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/62/file0/bus/bus" dev="overlay" ino=46453 res=1 22:56:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:23 executing program 2: socketpair(0x1d, 0x80014, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="db21256814b2f6b66e243dccf78347ec0edf63a02ba603a80447d5ba14312d5811acd0ab4d6852a679f4e03858e11ea7bee56fd38e69f9a83d6722cdaaf91924238dec3e6895660cd6a058370a0280917f6f7c9c", 0x54}, {&(0x7f0000001100)="9402af22e03bc6bef60389e6f416d0dfb5b20fa2f15936518e909c6c7cc7d42252ca2b693e8943cec721da89e4aa0f3d315ac335fca9dd3dae919e62509fa80bd6ced4e435893285ac5ee337bd862482aaf44d8e09f9be8fbfa6ef8dcc3bc6ced0997bdee5371cda1fa77af069ad2f2cf296533ff0e32566beebbdbd891c291beec4b918273ec884eed8c4158337f581bf832cc409161357e565d716c68e2c3cd97f5ef2f2b8727715da8a9a46a9de8e77b43b329d603281cacd0dc9bf063315963a45cf1615414c", 0xc8}, {&(0x7f0000001200)="1754f0d005684d8529e50ab9b778cb5b7b93b02af1ae8a989998f276020c089588b318de322b4b95ed462ad2128af2e52e9e32204872cbc0061d658ce1aec26d202613e49bb94594d77ce63e3ae0e41e7a394e9c2409c2a4e4248bc795b9755e3fbb19dce7f91ddeddabf4fba493a1d83ffae9d3ab74bfd4c85755e45b8a5e43e412fd1dc34c3186646225c27024bd676393710294caa371db02ea761484f832109d7747b495d4dc0757d479784a10043f3b7463025d3f5238cc386dd23867730f79bb00b568edbd93c9b29df31f0d", 0xcf}, {&(0x7f0000001300)="0e0c633f68d40ff79cde33f74e65a66631018fade8453687200a", 0x1a}, {&(0x7f0000001340)="631ee7d9f270c8c643a6e6117655ee34a7a816ea9f66eda87285d66495c6c32a824796d77e6419882f292f8caef5663763b57290e3160c2f1996323b560a8eb9017d38457e94df0ba09a6538db26edac184e435029d7b696098dfda1ad78f08d250d4ccd178d9f001b4febae14974c8cb5c9c7a1a1439efea3dd3d06a96e539fe431ce241284246040ab88a40d20c7208d17a89050df8215170bd25ad576dafadbe07906c6b1c6fb5467a029e4b873ada35b796350b846d945", 0xb9}, {&(0x7f0000001400)="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", 0x1000}], 0x7, &(0x7f0000002480)=[@assoc={0x18, 0x117, 0x4, 0x7ff}, @iv={0x88, 0x117, 0x2, 0x6d, "757a91d0e3f29b86255ec8de49ae17bb04da6c9fff5cb09e474fc262dce651165f047951c599de669b93428a208738c9f98824c73dbdf4a1f3b65f9441b26b25475fa4b7f61df3f7da0030844f2679f462ccf03375d9a3139439ab0552486fe0ae4e0442e3f0f1cb273e4a4c65"}], 0xa0, 0x4048080}, 0x4000000) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:56:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, 0x0) r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 22:56:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, 0x0) r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 533.275437][T11523] overlayfs: failed to resolve './file1': -2 22:56:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:24 executing program 2: r0 = socket(0x18, 0x2, 0x3) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000180)}, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000180), 0x80000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x800, 0x0, 0x0, {0xa, 0x0, 0x800a}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 22:56:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, 0x0) r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) [ 533.485147][ T27] audit: type=1804 audit(1580770584.135:110): pid=11544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/69/file0/bus/bus" dev="overlay" ino=46648 res=1 22:56:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x523) 22:56:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:24 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x88000, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x8809}, @void, @ipx={0xffff, 0x53, 0x7, 0x11, {@current, @random="ad0fa0ae71f0", 0x20}, {@broadcast, @broadcast, 0x2}, "cf4b5ca42970f80055c1137be306cb1e7ab829f852ac92eb785ef15f435cce148601ea8e5ffd88e5c54082153c68b450156959302a"}}, 0x57) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:56:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x523) 22:56:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:24 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 22:56:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x523) 22:56:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') dup(r0) sendfile(0xffffffffffffffff, r1, 0x0, 0x523) [ 534.386437][T11585] overlayfs: failed to resolve './file1': -2 22:56:25 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 22:56:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') dup(r0) sendfile(0xffffffffffffffff, r1, 0x0, 0x523) 22:56:25 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0xa6d, 0x9}, 0x78}, 0x10) 22:56:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 534.899079][T11619] overlayfs: failed to resolve './file1': -2 22:56:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') dup(r0) sendfile(0xffffffffffffffff, r1, 0x0, 0x523) 22:56:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:25 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 535.115756][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 535.115773][ T27] audit: type=1804 audit(1580770585.765:120): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/72/file0/bus/bus" dev="overlay" ino=45976 res=1 22:56:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r1 = dup(r0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x523) [ 535.325607][ T27] audit: type=1804 audit(1580770585.785:121): pid=11626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/72/file0/bus/bus" dev="overlay" ino=45976 res=1 22:56:26 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@ll={0x11, 0x5, r6, 0x1, 0xa6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000100)}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r7, 0x88, 0x67, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000180)}, 0x0) r8 = fcntl$getown(r7, 0x9) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=r8) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:56:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 535.403948][T11646] overlayfs: workdir and upperdir must reside under the same mount 22:56:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 535.458742][ T27] audit: type=1804 audit(1580770585.835:122): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/35/file0/bus/bus" dev="overlay" ino=46906 res=1 22:56:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r1 = dup(r0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x523) [ 535.609662][ T27] audit: type=1804 audit(1580770585.865:123): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/35/file0/bus/bus" dev="overlay" ino=46906 res=1 22:56:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 535.835749][ T27] audit: type=1804 audit(1580770586.485:124): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/36/file0/bus/bus" dev="overlay" ino=46053 res=1 22:56:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r1 = dup(r0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x523) [ 535.971841][T11676] overlayfs: workdir and upperdir must reside under the same mount 22:56:26 executing program 2: r0 = socket(0x15, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) socket(0x2, 0x80805, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x4801) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xe) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x10b}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000801) 22:56:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x0) 22:56:26 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) [ 536.220412][ T27] audit: type=1804 audit(1580770586.875:125): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/37/file0/bus/bus" dev="overlay" ino=47047 res=1 22:56:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 536.397621][ T27] audit: type=1804 audit(1580770586.875:126): pid=11682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/37/file0/bus/bus" dev="overlay" ino=47047 res=1 22:56:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 536.439100][T11704] overlayfs: workdir and upperdir must reside under the same mount 22:56:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x0) 22:56:27 executing program 2: r0 = socket(0x20000000000000a, 0x3, 0x40) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 22:56:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x0) 22:56:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:27 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) accept$packet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x14) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) sendfile(r2, r0, 0x0, 0x6) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:56:28 executing program 1: r0 = socket(0x20000000000000a, 0x3, 0x40) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 22:56:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 537.473025][ T27] audit: type=1804 audit(1580770588.125:127): pid=11744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/69/file0/bus/bus" dev="sda1" ino=16876 res=1 22:56:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 537.576817][ T27] audit: type=1804 audit(1580770588.165:128): pid=11741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/69/file0/bus/bus" dev="sda1" ino=16876 res=1 22:56:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:56:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:56:28 executing program 2: r0 = socket(0x20000000000000a, 0x80000, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) 22:56:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 537.975826][ T27] audit: type=1804 audit(1580770588.625:129): pid=11760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/77/bus/bus" dev="sda1" ino=16753 res=1 22:57:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:57:19 executing program 2: r0 = socket(0x8, 0xa, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:57:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:19 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:57:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:57:20 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x117600, 0x0) write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x1, 0x4, 0x0, 0x1, "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"}, 0x1010) 22:57:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:57:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 22:57:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@mcast1}}, 0xe8) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x6f, 0x9, 0x8006, 0x3f, 0x6a1, 0x400, 0x3, 0xfffffff8, r2}, 0x20) r3 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:57:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @mcast1, 0x4}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29}], 0x18}], 0x49249249249250d, 0x0) 22:57:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 590.580022][ T27] audit: type=1804 audit(1580770641.235:130): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/71/file0/bus/bus" dev="overlay" ino=16539 res=1 [ 590.662850][T11821] syz-executor.0 (11821) used greatest stack depth: 20632 bytes left 22:58:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:58:06 executing program 2: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x155102) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="02"], 0x1) fallocate(r3, 0x0, 0x40000, 0x4) fallocate(r2, 0x0, 0x0, 0x10fffe) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xd000000, r3, 0x0, 0x8}) ioctl$TIOCNOTTY(r2, 0x5422) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r4 = socket(0x20000000000000a, 0x1, 0xfd) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000780)=""/4096, &(0x7f0000000100)=0x1000) getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:58:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0xf0ffffffffffff, 0x0, 0x0, 0x0, 0x0) 22:58:06 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:58:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:58:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:58:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x1, 0x100}) 22:58:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = dup(0xffffffffffffffff) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 636.263099][ T27] audit: type=1804 audit(1580770686.915:131): pid=11845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/72/bus/bus" dev="overlay" ino=16537 res=1 22:58:07 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 636.375584][ T27] audit: type=1804 audit(1580770686.955:132): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/72/bus/bus" dev="overlay" ino=16537 res=1 22:58:07 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 22:58:07 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4, 0xee, 0x1, 0x4, 0xf8, 0x2f, 0x80, 0x1f, 0x5, 0x3, 0x74, 0x7, 0x0, 0x81}, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r3, 0x0, 0x40000, 0x4) fallocate(r2, 0x0, 0x0, 0x10fffe) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xd000000, r3, 0x0, 0x8}) r4 = socket(0xa, 0x3, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r6 = gettid() waitid(0x83b895581628fca4, r6, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6]], 0x8}}, 0x20004850) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r5}}, 0xc) 22:58:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = dup(0xffffffffffffffff) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 637.415966][T11879] overlayfs: failed to resolve './file0': -2 [ 689.208681][ T27] audit: type=1804 audit(1580770688.255:133): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/43/bus/bus" dev="sda1" ino=16568 res=1 22:58:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:58:59 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x4802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r2, 0x0, 0x40000, 0x4) fallocate(r1, 0x0, 0x0, 0x10fffe) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xd000000, r2, 0x0, 0x8}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000480)={0x83, 0x18, &(0x7f0000000080)="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"}) r3 = socket(0x29, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:58:59 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:58:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = dup(0xffffffffffffffff) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:58:59 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 22:58:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 689.532620][ T27] audit: type=1804 audit(1580770740.185:134): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/74/bus/bus" dev="overlay" ino=16581 res=1 22:59:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 689.645374][ T27] audit: type=1804 audit(1580770740.245:135): pid=11893 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/74/bus/bus" dev="overlay" ino=16581 res=1 22:59:00 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 689.826184][ T27] audit: type=1800 audit(1580770740.385:136): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16573 res=0 22:59:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 22:59:00 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x4, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={r0, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1, 0x32d1, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1, 0x3, 0x10}, 0xc) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 22:59:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:59:00 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000000300009001000000000000900100000000000090010000680200006802000068020000680200006802000003000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000300190010000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000066736d00000000000000000000000000bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc0506efeb70b5bc8c2d4ba3a94a2d2393e3182f64694d7d05fb478c8f56627a5cf905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8410000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000ac1e0001e000000200000000000000006873723000000000000000000000000069703667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d800f2ffffff000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) r2 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xfff7, 0x4, [0x7, 0x0, 0x7, 0x400]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={r3, 0x8}, &(0x7f0000000180)=0x8) [ 690.503677][ T27] audit: type=1804 audit(1580770741.155:137): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/75/bus/bus" dev="overlay" ino=16515 res=1 [ 690.578465][ T27] audit: type=1804 audit(1580770741.195:138): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/75/bus/bus" dev="overlay" ino=16515 res=1 [ 690.844361][T11934] overlayfs: failed to resolve './file0': -2 [ 691.130772][T11937] overlayfs: failed to resolve './file0': -2 22:59:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:59:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 22:59:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:59:50 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') 22:59:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:59:50 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:59:51 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 22:59:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 740.507491][ T27] audit: type=1804 audit(1580770791.155:139): pid=11951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/76/bus/bus" dev="overlay" ino=16584 res=1 [ 740.623374][ T27] audit: type=1804 audit(1580770791.215:140): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/76/bus/bus" dev="overlay" ino=16584 res=1 22:59:51 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:59:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:59:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 22:59:51 executing program 2: ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000000c0)={0x0, 0x1, [0x2, 0x11, 0x5, 0x1000, 0x10000, 0xfffffffd, 0x401, 0x470a2da0]}) r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) keyctl$chown(0x2, 0x0, 0x0, r2) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rmdir(&(0x7f0000000200)='./file0\x00') getgroups(0x2, &(0x7f00000001c0)=[r2, r3]) [ 741.212663][ T27] audit: type=1804 audit(1580770791.865:141): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/77/bus/bus" dev="overlay" ino=16546 res=1 [ 741.923207][T11984] overlayfs: failed to resolve './file0': -2 [ 741.932838][T11981] overlayfs: failed to resolve './file0': -2 22:59:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:59:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 22:59:53 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r6, 0x0, 0x40000, 0x4) fallocate(r5, 0x0, 0x0, 0x10fffe) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xd000000, r6, 0x0, 0x8}) r7 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r7, 0x88, 0x67, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r8, 0x88, 0x67, &(0x7f0000000040)=r8, 0x4) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r9 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r9, 0x88, 0x67, &(0x7f0000000040)=r9, 0x4) sendmsg$kcm(r9, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r10, 0x88, 0x67, &(0x7f0000000040)=r10, 0x4) sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r11 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r11, 0x88, 0x67, &(0x7f0000000040)=r11, 0x4) sendmsg$kcm(r11, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) write$P9_RREAD(r6, &(0x7f00000006c0)=ANY=[@ANYPTR64, @ANYRES32, @ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYBLOB="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", @ANYBLOB="d3395b770d5e81945ad693b371a6c4c1fb5447a91bb271b1fe1ac2532da17605e60e8988c70a41b3d5ce24e32815a9c4267432019250155abf6dda304658d9dc752f383e5a39970324826d323e5cf9e46ae086aa20b4a1a6c57eaa8a9a32b0c7f477f5fa86422b2d28acbbeb661b6f715b4448057aec0439df65a26d843abc16689cf8e2fa2233eaf8c3e8810ae9c64e63a9288dfa4318be611152be042c3d"], 0x10c5) fallocate(0xffffffffffffffff, 0x1, 0x5, 0x4) fallocate(r3, 0x0, 0x0, 0x10fffe) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xd000000, r4, 0x0, 0x8}) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x1) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="dbdf251b000000000000000100004f13f0eb45c3ad64bbbd75e505e2ae006cf3f2aea661640a634a9e9488feebfc3baca6a547ce3b0b065e25802591c9dd1b31b05b0f3c840b6d7089f9a416a01b68545888fa5710fddb1f6cc677dee21e30b6270af7c5"], 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x24000811) 22:59:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:59:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:59:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:59:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 742.962386][ T27] audit: type=1804 audit(1580770793.615:142): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/78/file0/bus/bus" dev="overlay" ino=16600 res=1 22:59:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:59:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 22:59:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 743.132699][T12006] overlayfs: failed to resolve './file0': -2 23:00:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r2 = socket(0x20000000000000a, 0x2, 0x1) getsockopt$sock_buf(r2, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000000c0)={0x8, 'veth0_to_bridge\x00', {'veth0_virt_wifi\x00'}, 0x5}) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4) 23:00:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:00:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:00:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:00:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 792.797608][ T27] audit: type=1804 audit(1580770843.445:143): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/79/file0/bus/bus" dev="overlay" ino=16606 res=1 23:00:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:43 executing program 2: socket(0x20000000000000a, 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000080)=@nl=@unspec, &(0x7f0000000100)=0x80, 0x80000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000140)) 23:00:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:00:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:00:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x10fffe) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8}) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x4, {0x1}}, 0x18) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x1ff) 23:00:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:00:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 793.461085][ T27] audit: type=1804 audit(1580770844.115:144): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/80/file0/bus/bus" dev="overlay" ino=16515 res=1 [ 793.555154][ T27] audit: type=1804 audit(1580770844.185:145): pid=12058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/80/file0/bus/bus" dev="overlay" ino=16515 res=1 23:00:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:01:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:01:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:01:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:01:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:01:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@mcast1}}, 0xe8) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=""/140, &(0x7f0000000140)=0x8c) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'ipvlan1\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) 23:01:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:01:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:01:35 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x80000) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x22000, 0x84) connect$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x4, 0x5b, 0x5, "d20badfac0261481064b89476fb27f6306a54b2cbc1820504d3720c2e71b83a828afd3435db7d80bbd877e567af0884378c61d6ab50df11aa631c7b42b14bf", 0x3e}, 0x60) 23:01:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:01:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 845.293663][ T27] audit: type=1804 audit(1580770895.945:146): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/82/file0/bus/bus" dev="overlay" ino=16622 res=1 [ 845.448032][ T27] audit: type=1804 audit(1580770895.945:147): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/82/file0/bus/bus" dev="overlay" ino=16622 res=1 23:01:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:01:36 executing program 2: r0 = socket(0x20000000000000a, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 845.777353][ T27] audit: type=1804 audit(1580770896.425:148): pid=12121 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/83/file0/bus/bus" dev="overlay" ino=16624 res=1 [ 845.842593][ T27] audit: type=1804 audit(1580770896.475:149): pid=12117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/83/file0/bus/bus" dev="overlay" ino=16624 res=1 23:02:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:02:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:02:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4cc], 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:02:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:02:27 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) recvfrom$ax25(r0, &(0x7f0000001580)=""/208, 0xd0, 0x2, &(0x7f0000001680)={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000180)="ce17af518f58b00e9e577eb931dc687ee4b8be10c3439ee887108d58261778b5374ce797bbf957b6da53f0c371f4ca95f4f0042470afa3045e06dd425e310d9fa7596a16c55e34a6e98b1c46d4", 0x4d}, {&(0x7f0000000200)="c2ab71d8eec7c0e7d3aeff039bc497ae07abccc59917fa1b64cf6980737ed51b08f5f5e7f8d403f01d92dc293b21b514b6645d35a84147d97ed64a259d535be0a410813992ea4216c8a3d82403e37c330ec2e9d146dcb132b39275633f53a0db98a595f7e94ddd3f27fd980d79baf86baf1f4b1747998fc3704bbfd2b2e57331ea908c8a0651223f3f3bd4e3a301dcc2fc5f8d7c418ccd3e4ab092eccd27d3afe87216bbf5acd146d2bf5bb42fa3d6a420ba4d2b9b0c86a85f48c47c14473b7e73e15261791f8c53b5c566f936a3e4cd4b2a92e160d198f57f9c3ae06f8c202b3c613ad691a761cb269dbee448e42cce6f", 0xf1}, {&(0x7f0000000300)="7bf0c165971389e5208cf2eff9838debc9c4a377c6d17340e57bbe1533d765a9e5ffaade6db4750650368cad7573712ea1ce3d852ce5ee761c7665c758493d9b46e028de023016dc8e865393581ac4e6b47020472fcd215763f732841bd33698196a6d208af2e3ea1e521bda5cdd9d5c93024d6bdb08014509d776", 0x7b}, {&(0x7f0000000380)="c75189b4bbd076fae087bc47fc5e508cb543fcf3a63dffb99956547bb9a14d14207b00d4770a0d93e32fd5617f9c69fcfd29ecaa4d65b78a8025a5aa5513cbf5f47a2800179c0758b5eedd159d16ea1f78bcc0f36e9de572883e2e40b9a724cd9f4331ad2772ab21f7c92fde7ab30e3b1e44bd249001bc8c0f8520bdf766d5d8c786bc351c9835f55b45a5304ece220113d985763919db922366618cd9c006a9d41c4479d242cf458aa41c4df9a2cef1e729ed83e831effb0c9b1dc9ecc3fa5d0b2c28f88418", 0xc6}], 0x5}, 0x80) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) 23:02:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 897.376904][T12148] overlayfs: workdir and upperdir must reside under the same mount [ 897.467601][ T27] audit: type=1804 audit(1580770948.115:150): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/84/bus/bus" dev="sda1" ino=16593 res=1 23:02:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:02:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:02:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:02:28 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 897.867655][T12159] overlayfs: workdir and upperdir must reside under the same mount 23:02:28 executing program 3: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x0, 0x1) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000380)={0xffffffeb, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "46a7a1", "15e7a926974d6e29f785fb0194cd94ede093b224b871bcf3ef8201a363fcb584be1e33ee1a17b1f5469ac032260a1fdfc4ba34ff0e39286399e02968f2846272c213aa2b934d51e00e070251426b4500000000294717e9ff0f8675840d7ac11154948f8c31e44c3b2bdad8ea277971c06f8da5f382be243d3b15063afd5ec6f77b8f5bce76e2d9630100e3842cf10a979e55863d528962e8bf407bc2c2fefb01b18ff5c1858910c1de10f91d8b4d130d03a2c92f501cf43dad9d4afeb652ae63112274a075a945ebbd20e8c946e05edb04add81afdc140d6cb6d8165be0ca7203730104b9d7b2700000000000000079708030000005bed4f00"}}, 0x110) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f00000001c0)={0x0, r4+30000000}, 0x0) [ 897.974532][ T27] audit: type=1804 audit(1580770948.625:151): pid=12165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/85/bus/bus" dev="sda1" ino=16593 res=1 23:02:28 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 898.108593][ T27] audit: type=1804 audit(1580770948.675:152): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/85/bus/bus" dev="sda1" ino=16593 res=1 [ 898.943371][ T27] audit: type=1804 audit(1580770949.595:153): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/85/file0/bus/bus" dev="overlay" ino=49505 res=1 23:03:24 executing program 2: socket(0x20000000000000a, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$caif_stream(0x25, 0x1, 0x2) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000002900)=0x5) 23:03:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:03:24 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:03:24 executing program 3: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x22084, 0x0) r1 = socket(0x11, 0x0, 0x0) write(r1, &(0x7f00000000c0), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x3, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x4000, 0x0) socket(0x2b, 0x80a, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x6, 0x1000, 0x47, &(0x7f0000000340)="9124742f4121833be25948289d649df4091a1f6f19c95e446acbaf13217cf50ec25f6c3b72b129d6444dd79b5f2ddc07169127f6be5c5c613b31d99bb00eedb16fb2e294486120", 0x7c0, 0x0, &(0x7f0000001cc0)="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"}) fcntl$notify(r2, 0x402, 0x80000030) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x22d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e23, @empty}, {0x1, @broadcast}, 0x54, {0x2, 0x4e23, @remote}, 'veth1_to_team\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20004850) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={'veth1_to_team\x00', 0x8}) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9']) 23:03:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:03:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 953.924291][T12193] overlayfs: workdir and upperdir must reside under the same mount 23:03:24 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:03:24 executing program 2: r0 = socket(0x8, 0x4, 0xdd) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 954.067520][ T27] audit: type=1804 audit(1580771004.715:154): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/86/bus/bus" dev="sda1" ino=16529 res=1 23:03:24 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:03:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 954.217734][ T27] audit: type=1804 audit(1580771004.775:155): pid=12193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/86/bus/bus" dev="sda1" ino=16529 res=1 23:03:24 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @empty, @multicast1}, &(0x7f0000000600)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@newqdisc={0x84, 0x24, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xc, 0x9}, {0x10, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x54, 0x2, {{0xc7, 0xdb, 0x0, 0x7fff, 0x2, 0x6}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xffffffffffff7057}, @TCA_NETEM_DELAY_DIST={0x2c, 0x2, "104a776250bac61d7715a01a54976e848b59b3c11a6ddb3711f575ca287063c62d1956ca2f2f9291"}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008014) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 23:03:25 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 954.540440][T12222] overlayfs: failed to resolve './file1': -2 [ 954.578591][ T27] audit: type=1804 audit(1580771005.185:156): pid=12219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/86/file0/bus/bus" dev="overlay" ino=50356 res=1 23:03:25 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r2, 0x0, 0x40000, 0x4) fallocate(r1, 0x0, 0x0, 0x10fffe) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xd000000, r2, 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, [], [], [], 0x0, 0xffffffff, 0x0, 0x1000, "74535b1c60c749e4c1e1867281a76ed1"}) 23:03:25 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:03:25 executing program 3: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x22084, 0x0) r1 = socket(0x11, 0x0, 0x0) write(r1, &(0x7f00000000c0), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x3, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x4000, 0x0) socket(0x2b, 0x80a, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x6, 0x1000, 0x47, &(0x7f0000000340)="9124742f4121833be25948289d649df4091a1f6f19c95e446acbaf13217cf50ec25f6c3b72b129d6444dd79b5f2ddc07169127f6be5c5c613b31d99bb00eedb16fb2e294486120", 0x7c0, 0x0, &(0x7f0000001cc0)="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"}) fcntl$notify(r2, 0x402, 0x80000030) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x22d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e23, @empty}, {0x1, @broadcast}, 0x54, {0x2, 0x4e23, @remote}, 'veth1_to_team\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20004850) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={'veth1_to_team\x00', 0x8}) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9']) 23:03:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 955.249070][T12243] overlayfs: failed to resolve './file1': -2 [ 955.815033][ T27] audit: type=1804 audit(1580771006.465:157): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/50/file0/bus/bus" dev="overlay" ino=49679 res=1 23:03:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:03:27 executing program 2: r0 = socket(0x23, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'\x00', 0x0}) getpeername$netlink(r4, &(0x7f0000000100), &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000180016801400018010000200"/32], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wireguard1\x00', r6}) 23:03:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:03:27 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:03:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:03:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x1, 0x0, 0x2}) 23:03:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000004c0)={0x0, 0x40000, &(0x7f0000000480)={&(0x7f0000000240)={0x28, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) [ 956.708010][T12271] overlayfs: failed to resolve './file1': -2 [ 956.769093][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 956.803113][T12278] overlayfs: failed to resolve './file1': -2 [ 956.809330][ T27] audit: type=1804 audit(1580771007.455:158): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/87/file0/bus/bus" dev="overlay" ino=49705 res=1 23:04:21 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:04:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r3, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:04:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:04:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:04:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:04:21 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:04:21 executing program 2: r0 = socket(0x2, 0x80805, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) sendmmsg$inet(r2, &(0x7f0000002e40), 0x0, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080)=0x101, 0x4) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) r4 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r6, 0x0, 0x40000, 0x4) fallocate(r5, 0x0, 0x0, 0x10fffe) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xd000000, r6, 0x0, 0x8}) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f00000000c0)) 23:04:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1011.346252][T12301] overlayfs: failed to resolve './file1': -2 23:04:22 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:04:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:04:22 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 1011.809040][ T27] audit: type=1804 audit(1580771062.465:159): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/91/file0/bus/bus" dev="overlay" ino=50501 res=1 [ 1012.068424][ T27] audit: type=1800 audit(1580771062.595:160): pid=12309 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16568 res=0 23:04:22 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x81, 0x12000) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'ip6_vti0\x00', 0x6}) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 23:04:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1012.187848][T12326] overlayfs: failed to resolve './file1': -2 23:04:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1012.268412][ T27] audit: type=1804 audit(1580771062.615:161): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir138525052/syzkaller.dZm3aC/91/file0/bus/bus" dev="overlay" ino=50501 res=1 [ 1012.469787][ T27] audit: type=1804 audit(1580771062.955:162): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/88/bus/bus" dev="sda1" ino=16561 res=1 [ 1012.621469][T12337] overlayfs: failed to resolve './file1': -2 23:05:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:05:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1065.898426][T12342] overlayfs: failed to resolve './file1': -2 23:05:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:05:17 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000040)) 23:05:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:05:17 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 1066.736883][T12345] overlayfs: failed to resolve './file1': -2 23:05:17 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000002c0)={'bond_slave_1\x00', 0x1}) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x301801, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000100)='syz0\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x20000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000300)=[{0x9a, 0x80, 0x0, 0x4}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r5, 0x0, 0x40000, 0x4) fallocate(r4, 0x0, 0x0, 0x10fffe) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, r5, 0x0, 0x8}) r6 = dup(0xffffffffffffffff) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f0000000200)) write$midi(r5, &(0x7f0000000180)="c4823d2808f0bd4183e944bd76ed3ba19cc5aa9c0b823848878217cac04fb62423f3667d805d6c6dd9e937789f94a74da62649f074e513f26d9d1b06c52586d730151165cbacac9cb4cdb8585a3505ce85c4e6ae97eb3c8e70c1baf1943eb1b3bd7c704e912e705b43332636", 0x6c) 23:05:17 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) 23:05:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1067.384277][T12361] overlayfs: failed to resolve './file1': -2 23:05:18 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) 23:05:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1067.924125][T12374] overlayfs: workdir and upperdir must reside under the same mount 23:05:18 executing program 2: socket(0x20000000000000a, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)) 23:05:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1068.244844][T12381] overlayfs: failed to resolve './file1': -2 [ 1068.673360][T12388] overlayfs: failed to resolve './file1': -2 23:06:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:06:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) 23:06:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:06:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:06:06 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r5, 0x800}, &(0x7f0000000080)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r7, 0x0, 0x40000, 0x4) fallocate(r6, 0x0, 0x0, 0x10fffe) fdatasync(r7) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xd000000, r7, 0x0, 0x8}) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) 23:06:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1116.234075][T12396] overlayfs: workdir and upperdir must reside under the same mount [ 1116.312500][ T27] audit: type=1800 audit(1580771166.965:163): pid=12399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16538 res=0 [ 1116.417135][ T27] audit: type=1804 audit(1580771167.005:164): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/55/bus/bus" dev="sda1" ino=16548 res=1 23:06:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 23:06:07 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x4008) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = semget$private(0x0, 0x1, 0x102) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000180)=[{0x1, 0x0, 0x1000}, {0x0, 0x2e3, 0x800}, {0x3, 0x7c, 0x1000}, {0x2, 0x5403, 0x800}, {0x2, 0x2, 0x1000}, {0x4, 0x4, 0x800}, {0x1}], 0x7, &(0x7f0000000200)={r2, r3+10000000}) r4 = socket(0x20000000000000a, 0x2, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0xdb6, 0x10001}]}, 0xc, 0x1) getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 1116.907312][T12408] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 23:06:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:06:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 23:06:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:06:07 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x1, &(0x7f0000000040)="b0e747dfa91e9ce842464aec8cc63ffb35db4b216716d54488d3123a99aac27b5246d2172ca410b4af9a584f3bb70416a3d0d99891b90d14c879ce54ebc9fe0e4b65a2055094d9828f8df4f677a6") getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 1117.149272][T12413] overlayfs: workdir and upperdir must reside under the same mount [ 1117.211627][ T27] audit: type=1804 audit(1580771167.865:165): pid=12413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/56/bus/bus" dev="sda1" ino=16517 res=1 [ 1117.614044][T12424] overlayfs: failed to resolve './file0': -2 [ 1118.158590][T12431] overlayfs: failed to resolve './file1': -2 [ 1118.382984][T12436] overlayfs: failed to resolve './file1': -2 23:06:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:06:59 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) fcntl$getflags(r0, 0x1) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) pipe2(&(0x7f0000000180), 0x0) 23:06:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 23:06:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:06:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:06:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:06:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 1168.446038][T12443] overlayfs: failed to resolve './file0': -2 23:06:59 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0x3, 0x6, r0, 0x0, &(0x7f0000000040)={0x9a091e, 0x10001, [], @ptr=0x3}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@mcast1, @mcast2, @dev={0xfe, 0x80, [], 0x43}, 0x44475166, 0x8001, 0x3, 0x100, 0x6, 0x880068, r6}) [ 1168.564073][ T27] audit: type=1804 audit(1580771219.215:166): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/57/file0/bus/bus" dev="overlay" ino=16529 res=1 23:06:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:06:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:06:59 executing program 2: socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000040)) 23:06:59 executing program 4: chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1169.174812][T12460] overlayfs: failed to resolve './file0': -2 [ 1169.531164][ T27] audit: type=1804 audit(1580771220.185:167): pid=12468 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/58/bus/bus" dev="overlay" ino=16618 res=1 [ 1170.444913][T12474] overlayfs: failed to resolve './file1': -2 [ 1170.637579][T12477] overlayfs: workdir and upperdir must reside under the same mount [ 1170.730088][ T27] audit: type=1804 audit(1580771221.375:168): pid=12477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/91/bus/bus" dev="sda1" ino=16624 res=1 23:07:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:07:52 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x3}]}, 0x24}}, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r3, 0x0, 0x40000, 0x4) fallocate(r2, 0x0, 0x0, 0x10fffe) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xd000000, r3, 0x0, 0x8}) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="2acae5697f56a80a8e7a6b739e248b986a2071db") 23:07:52 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:07:52 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:07:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:07:52 executing program 3: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x8, 0x20000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa00000, 0x20000000209, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9, 0x0, 0xffffffffffffffff, 0x8}) [ 1221.627540][ T27] audit: type=1804 audit(1580771272.275:169): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/59/bus/bus" dev="overlay" ino=16628 res=1 23:07:52 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x34) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) flock(0xffffffffffffffff, 0x4) write$P9_RREAD(r6, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r6, 0x0, 0x40000, 0x4) fallocate(r5, 0x0, 0x0, 0x10fffe) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xd000000, r6, 0x0, 0x8}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) fallocate(r4, 0x4, 0x40000, 0x4) fallocate(r3, 0x0, 0x0, 0x10fffe) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xd000000, r4, 0x0, 0x8}) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000100)=0x251e) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0x101, 0x855, 0x201e, 0x0, 0x7, 0x2, 0x2, 0x5}}) write$P9_RREAD(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="85"], 0x1) fallocate(r2, 0x0, 0x40000, 0x4) fallocate(r1, 0x0, 0x0, 0x10fffe) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xd000000, r2, 0x0, 0x8}) ioctl$KIOCSOUND(r2, 0x4b2f, 0x5) r7 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x7fffffff, 0x101200) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f00000001c0)={@null=' \x00', 0x3, 'wireguard0\x00'}) [ 1221.917572][ T27] audit: type=1800 audit(1580771272.275:170): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16619 res=0 23:07:52 executing program 4: chdir(0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:07:52 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:07:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:07:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:07:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x0, 0x17, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 1222.885698][T12512] overlayfs: failed to resolve './file1': -2 [ 1222.978931][ T27] audit: type=1804 audit(1580771273.625:171): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/60/bus/bus" dev="sda1" ino=16620 res=1 [ 1224.230670][T12528] overlayfs: workdir and upperdir must reside under the same mount [ 1224.305660][ T27] audit: type=1804 audit(1580771274.955:172): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/92/bus/bus" dev="sda1" ino=16532 res=1 23:07:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:07:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x0, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:07:55 executing program 4: chdir(0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:07:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:07:55 executing program 2: socket(0x20000000000000a, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0xc8200, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@generic={0x10, "f85097069d94672508901c5a189a7d2f4a23a3726aa7a262e1750a1337362ef3b279da4e1def6c7b3901fbec035a43a5c4c3f4e5fa6ebc40528fe118d99242911a4f6a6b67f8e20405a220f103750f4f1d6b4e7b07d00b662d6282444fbe0905fc0fe1f665b2269a4e176c2dffd0073f1aa526d4cb46d3f94c1e46bfb025"}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b48950f7041322af0956abfb8df680a8d572fd47a25e148e218e019c9eac40e1fc1351b160cf3ca959f9c3b84d12292591dc11e8a53c5f2c6d68db4d202389dba286f2551d95ff6e372f004b79114ee226f69e77021826d8bbb769e06cd15747c22c514207c46439b4e80b3f01de9e6a12cb00cd821ee056a7ff90ad53d86a2ce6521f18e71f4dd836aad27cff812a7e2032adeefc4b71c59b05ea2754640d", 0x9f}], 0x1, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], 0x1272}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xae, 0x80200) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000140)) 23:07:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) [ 1225.097900][T12537] overlayfs: workdir and upperdir must reside under the same mount [ 1225.164984][ T27] audit: type=1804 audit(1580771275.815:173): pid=12537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir600015626/syzkaller.3nduh9/93/bus/bus" dev="sda1" ino=16663 res=1 [ 1225.239538][T12544] overlayfs: failed to resolve './file0': -2 23:09:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x0, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 1291.455576][ T27] audit: type=1804 audit(1580771276.015:174): pid=12544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127229153/syzkaller.tP5kzT/61/bus/bus" dev="sda1" ino=16669 res=1 23:09:02 executing program 4: chdir(0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:09:02 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000200020423df020000", 0xb9) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_enter(r5, 0x3, 0x0, 0x0, 0x0, 0x3a) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r6, 0x800000000008982, &(0x7f0000000080)) r7 = socket(0x40000000002, 0x3, 0x2) bind$rds(r7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000180)={r6}) r9 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xd490010}, 0x2b4, &(0x7f0000000600)={&(0x7f0000001580)=ANY=[@ANYBLOB="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", @ANYRESOCT=r10, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="fa2201f204b1f4f94c2279e4", @ANYRES16=r10, @ANYBLOB="080039bd7000ffdbdf25040000000c00010008000900510000004000020014000100fe8000000000000000000000000000bb080003000300000008000700ff00000008000e004e240000080002004e24000008000400fe0000000800050008000000"], 0x3}, 0x1, 0x0, 0x0, 0x200008c1}, 0x14000) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = fcntl$dupfd(r11, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_DEST(r13, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9040000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="7c3f27010d661fab9854c56a4a0d74f311e75ed89eed4fc00dad5b6e1412e6d9b9566d6dcae9b9a64a4f919f1794600fa8b5bc5c3b008fbbe688ce9bbb1a2d73c7ffb455eb50e5348cf1aef26716e6b41cbe3d33aec06136c2a7e274dd4f845af44bdc5d8c62763c1396682f6ac5341b3fc91679da0a021ebe6a12c9803a8573e993168ef2392808962fbdc51a4ca4f8", @ANYRES16=r10, @ANYBLOB="08002bbd7000fddbdf2507000300000000000000020064756d6d793000000000000000000000080004000000f8ff070003000400000014000600fe800000000000000000000000000025080003000400000014000600000000000000000000000000000000000800040085b4000014000600ff02000000000000000000000000000128000100080009007e0000000c0006006e6f6e65000000000800060072720000080002003d000000380001000800080001000000080004004e24000014000300ac1414bb00000000000000000000000008000500000000000800090072000000140001000800090054000000080004004e20000054000100080002002e0000000c0007000000000001000000080004004e200000080002002c0000000800090067000000080002002f000000080009001b00000008000500010000000c00070013000000020000002c0a010008000b00736970000800090041000000080005000000000008000100000000000800020000000000"], 0x3}, 0x1, 0x0, 0x0, 0xa040091}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000001180)={&(0x7f00000010c0), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r10, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40002) r14 = socket(0x10, 0x3, 0xc) write(r14, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) write(r14, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000200020423df020000", 0xb9) r15 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r16, &(0x7f0000000200)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) r17 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_enter(r18, 0x3, 0x0, 0x0, 0x0, 0x3a) r19 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r19, 0x800000000008982, &(0x7f0000000080)) r20 = socket(0x40000000002, 0x3, 0x2) bind$rds(r20, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r20, 0x89e2, &(0x7f0000000180)={r19}) r22 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r22, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) r23 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r22, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xd490010}, 0x2b4, &(0x7f0000000600)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESOCT=r23, @ANYBLOB="040028bd7000fddbdf25099a82d5b1b4dfee8bce8bc949b59f961b0000000800046369875e2ece272d60fa4ea46f4d88f26d267df1de3d3cd1d794231207ed558c8bd03384a45f4d67aab0e2fd9c6e8a662e01e578fb429b4ede090a550d0c5695652e1348d6275b31ee5bafbbba0840c8714a937d23fca39a0dc5b750420dcce72bfba81264d0437f4aaa0995887c4542e057eb"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$IPVS_CMD_GET_SERVICE(r21, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="fa2201f204b1f4f94c2279e4", @ANYRES16=r23, @ANYBLOB="080039bd7000ffdbdf25040000000c00010008000900510000004000020014000100fe8000000000000000000000000000bb080003000300000008000700ff00000008000e004e240000080002004e24000008000400fe0000000800050008000000"], 0x3}, 0x1, 0x0, 0x0, 0x200008c1}, 0x14000) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r25 = socket$inet_tcp(0x2, 0x1, 0x0) r26 = fcntl$dupfd(r24, 0x0, r25) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_DEST(r26, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9040000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="7c3f27010d661fab9854c56a4a0d74f311e75ed89eed4fc00dad5b6e1412e6d9b9566d6dcae9b9a64a4f919f1794600fa8b5bc5c3b008fbbe688ce9bbb1a2d73c7ffb455eb50e5348cf1aef26716e6b41cbe3d33aec06136c2a7e274dd4f845af44bdc5d8c62763c1396682f6ac5341b3fc91679da0a021ebe6a12c9803a8573e993168ef2392808962fbdc51a4ca4f8", @ANYRES16=r23, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0xa040091}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r18, &(0x7f0000001180)={&(0x7f00000010c0), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r23, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40002) sendmsg$IPVS_CMD_GET_DAEMON(r17, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x90, r23, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x14}, @IPVS_CMD_ATTR_DEST={0x50}]}, 0x90}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) sendmsg$IPVS_CMD_GET_CONFIG(r16, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r23, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r27 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r27, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r15, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYPTR, @ANYRESHEX=r27, @ANYRES32=r21, @ANYPTR=&(0x7f0000001400)=ANY=[@ANYRESDEC], @ANYPTR, @ANYPTR64=&(0x7f0000001440)=ANY=[@ANYRESHEX], @ANYRES64=r14, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0xa}, 0x1, 0x0, 0x0, 0x24044804}, 0x9850) sendmsg$IPVS_CMD_DEL_SERVICE(r14, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r23, @ANYBLOB="004425bd7000fddbdf2503000006000001807400ccf4c9a16e42bab8d98f99bc8e200280080005000b0d000050000280"], 0x104}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r23, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r10, @ANYBLOB="000427bd7000fcdbdf250d00000058000300140002006361696630000000000000000000000008000400050000000800040000020000140002006772657461703000000000000000000014000600fe80000000000000000000000000002908000400000000003806010008000b0073697000080001000e000000080004004e210000080004004e2000000c00070010000000200000000800010002000000080005000004000008000500090000000c000300080007004e2100001400010008000500010000000800020096a9000034000100080001000200000008000200020000000800050004000000080008008100000008000100e691000008000500020000004400030014000600ff020000000000000000000000000001080001000000000014000600fe8000000000000000000000000000aa080003000100000008000500e0000002"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r28 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r28, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r29 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r29, 0x88, 0x67, &(0x7f0000000040)=r29, 0x4) sendmsg$kcm(r29, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYPTR, @ANYBLOB="c171c578adbf264b403a720bc881c1bf67", @ANYRES64=r29, @ANYPTR=&(0x7f0000001400)=ANY=[@ANYRESDEC], @ANYPTR, @ANYPTR64=&(0x7f0000001440)=ANY=[], @ANYRES64=r1, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0xa}, 0x1, 0x0, 0x0, 0x24044804}, 0x9850) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="004425bd7000fddbdf2503000006000001807400ccf4c9a16e42bab8d98f99bc8e200280080005000b0d000050000280"], 0x104}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r10, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10044060}, 0x20000000) r30 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r31 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r31, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r31, 0x0, 0x40000, 0x4) fallocate(r30, 0x0, 0x0, 0x10fffe) fdatasync(r31) ioctl$EXT4_IOC_MOVE_EXT(r30, 0xc028660f, &(0x7f0000000040)={0xd000000, r31, 0x0, 0x8}) ioctl$SNDRV_PCM_IOCTL_XRUN(r30, 0x4148, 0x0) 23:09:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:09:03 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000040)="2071a9a1abf60163908f427f8deeaddae22259990e88fdcf63c1c1f37c9c10a8c005711cd18977b0679e05d7a3f99b998339895574dbaf93b400a6976c1e214057ac99cfc0bd87d32f427e6148c4c0c2765a73290f19f08e44dbe9baedec1fb29d3b14b3d22d17f8d1f11d7fd46a712b83c1f18fa5dd3dbd272f0cb66e7c3baf11c37f6b6738a555dde9f31d8120a8484ed5d86c0accf390757eefb88df00cae19e65a035b04e30ec37301fc5f2dc63cc05a") 23:09:03 executing program 2: r0 = socket(0xb, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r4, 0x0, 0x40000, 0x4) fallocate(r3, 0x0, 0x0, 0x10fffe) r5 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101000) r6 = socket(0xa, 0x3, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r8 = gettid() waitid(0x83b895581628fca4, r8, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r8]], 0x8}}, 0x20004850) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r7}}, 0x18) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xd000000, r4, 0x0, 0x8}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r10 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r10, &(0x7f0000000400)=ANY=[@ANYBLOB="720bc3a5b8b21b75bc7ceb8d51e7665b0bb6e161e1e2e5c5fe3b7a4eccca626b57ca46b3bf8c2bf31bf91aea5ae57488e5456b5731e14888c26d18268ca787fe9a7f1189301f76169fd7d78c2f9ff487868c79"], 0x1) fallocate(r10, 0x0, 0x40000, 0x4) fallocate(r9, 0x0, 0x0, 0x10fffe) fdatasync(r10) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0xd000000, r10, 0x0, 0x8}) write$P9_RREAD(r9, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2], 0x19) fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r1, 0x0, 0x0, 0x10fffe) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xd000000, r2, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000040)={0x4, 0x7, 0x5}) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 23:09:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:09:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) 23:09:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r1, 0x0, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 23:09:04 executing program 2: r0 = socket(0x20000000000002a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 23:09:04 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:09:04 executing program 2: socket(0x20000000000000a, 0x2, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x1, 0x12, 0x40}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000000)=0x26) r0 = socket(0x2, 0x80805, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x1, 0x0) mq_timedreceive(r1, &(0x7f0000000140)=""/35, 0x23, 0x8, 0x0) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0x2, 0x0, @empty=0xa9fe0000}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket$l2tp6(0xa, 0x2, 0x73) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x40000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x48, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x48084}, 0x81) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:09:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000005f40)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x22110}, 0xc, &(0x7f0000005f00)={&(0x7f0000005d80)={0x150, 0x7, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xf5, 0x7, 0x1, 0x0, "979807c75dfd1b02eb74d6c7c6a6306dae0bfcf9ec359d9948f44d5c41fd8030ae181a3ca9ef0a69853a7298615f9f96050bdac2d9433d1ca9963e97649c8619c9e2dbef487c7cae89f87ff435d2e474bfa6790728d74d8e5ce7c55e80bbac7b745a62a4f886fe39e05fdec540af083996c81d733ad3b247a95593da8fb4f89484ce28f7acc223cec8704a77bfe0863292d04ea41ba1a4b8b6f1907fad5b3164433f3388ef486aecbd23dd87fcac6013c71f51ba0f53e1d28f166e8d2a766b6b31c1fd1ab34449255b04b5fdc04e9bec3af552cda450c96e51c1ee0d159792bbc2c6ef849b4724f8e8551aa4d81226fb95"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x20000000000000a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r3, 0x0, 0x40000, 0x4) fallocate(r2, 0x0, 0x0, 0x10fffe) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xd000000, r3, 0x0, 0x8}) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 1294.464758][ T27] audit: type=1800 audit(1580771345.115:175): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16488 res=0 23:09:05 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)=0xfffe00) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x4e20, @multicast2}}) 23:09:05 executing program 2: r0 = socket(0x6, 0x80000, 0xfd) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x1, @empty, 0xd}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="ff4a5b995f5c28444b4e8f21ef801688c547e659d91a6b1c604eb41553ff708de489c3c4213de2e07e46cc367500c6f00221cdbdcd2e71e46ca22585114330eee819ca32f270989776c037aa82d7df65e1c0cb1b50c9ad4bfa7297b9dca61ecf811a32192217cd98fd21fa33be676c7d1e54b2c23332dc35e5c36f4aa8c67538877443e67f1cec571162b8969547eb04b1da5495e2c4f860874f6cef4f6fcb0354837de428826291930db0ec452c8a651e47d570b7c97a3768e7be61a053fbf1a2e2827f299edee5232425ffdd17bd20dae5f97520e50b2fe1deaa9338c4c2df", 0xe0}, {&(0x7f00000006c0)="97bd52756a85b22129861c7aa65cf0dfd6530917ad821763089a8d1e73236900b12beab042ab7c03e5219ece21e649165339fc476d237e4ccd53e1d4626a377a753ffffb15eb1187fed7809e54c70a814be96ab35c2e00402f5f2dd701c9e2f2e15dfb83a462321d8a0901c3f43f77694de30e486ebee838c44a8bbebc2200082d5a71883b93415fe4e7da99b19f86d025844ba2913823da6c5457bdfce745ee0fefd52ad34d79bd935367a184994193ee321f120860bad16834e34b0b3750042323be3608602c9efd13e343e2fe264712ef6a3c27f2d291c997c4729ac664608a1894fc33", 0xe5}, {&(0x7f0000000340)="d4341bde958abaaa71db1b5e24c2f5960c7193564f8efdc58103d1948cf429bb1902323e82a69692f02c9e64de820f97c79f74752f34a1326f9ae907c0c2275434b7b3681dfedf0efa214c7ac09f811924d7ad04b8f5995c9a273b749e58340bf963328d142c84b89995aeac3cb842c019", 0x71}, {&(0x7f00000003c0)="669734b21f8ec216c08256027ed980a34a18fb6d2195019855a6539d99f12fe2c33f9b11c9aa0b5294bd4e0a2845611383040859e247c58de8894756b2e358687e3b634bf263662c20d7055a4f6d1a47c01eb503bb3e60ba967672ffced78355899d6374855ecab688c89865533f13482ccb026b54ecd109307bf8e57aa332b3c4fd3040692abd023a49ed054f31044291ef792794bcf4cae1f62fd4199aaa546509cea12a8dc77270877a8b2b545d970729e292a7", 0xb5}, {&(0x7f00000004c0)="1bdb61180b89cd369305237bbb728e30f7eb33fcdcf329d993760911ea39152170a78089f587b3a40aff815e3899ff319ee5", 0x32}, {&(0x7f0000000500)="3b95cede9def0f7c7f336b567d02c843bd2512832d121b75eb0b1832efda6b4735fbf71257760b0629a67099d7e65f9c0cf7f3c6b418ac990c464344d2a939bf37bf50c80c56ef4bc5f2797613091c5e0919c37dbb7e7d99e143da79fa10452e3282ac3088bdaf345c16c25b211735b97d451c11a2119760b7c1041cc893fd08d09a78950107b15893a6387571015cb0dffed06b2cd42fc6c6740c9d72dadccd553de4534bcd56c4b5cc4e3b5e235959a7ee002ad6dd89166ae7c8175bb4c327813b2feda79cbcd34aa0d0d32b58e3bf0f9f69cf582d06b6667c0492477a5f2cefccb034ba4d366b26afb622c97cfc94a165c4a0f8d694", 0xf7}, {&(0x7f0000000600)="48e2fa1954be1166482fc4aaf23954f724f3937bd2f28a92e45ddc6370124d13bf5f7f381bca76fba7b81ac002481350e99b4186a1", 0x35}], 0x7, &(0x7f0000000180)}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f0000000040)=r4, 0x4) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r5 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r6 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xf}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000180)}, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80043, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff, r1, r2, r3, r4, r5, r6, r7], 0x9) [ 1295.208476][ T734] tipc: TX() has been purged, node left! [ 1296.163420][T12627] IPVS: ftp: loaded support on port[0] = 21 [ 1297.164593][T12627] chnl_net:caif_netlink_parms(): no params data found [ 1297.168993][T12632] IPVS: ftp: loaded support on port[0] = 21 [ 1297.184766][T12633] IPVS: ftp: loaded support on port[0] = 21 [ 1297.291528][T12634] IPVS: ftp: loaded support on port[0] = 21 [ 1297.656127][T12627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.673262][T12627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.699620][T12627] device bridge_slave_0 entered promiscuous mode [ 1297.792245][T12627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.801451][T12627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.818147][T12627] device bridge_slave_1 entered promiscuous mode [ 1297.915955][T12627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.926529][T12632] chnl_net:caif_netlink_parms(): no params data found [ 1297.951678][T12633] chnl_net:caif_netlink_parms(): no params data found [ 1297.964087][T12627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.985133][T12634] chnl_net:caif_netlink_parms(): no params data found [ 1298.094428][T12627] team0: Port device team_slave_0 added [ 1298.115776][T12627] team0: Port device team_slave_1 added [ 1298.216218][T12634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.223688][T12634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.233095][T12634] device bridge_slave_0 entered promiscuous mode [ 1298.257305][T12627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.270170][T12649] IPVS: ftp: loaded support on port[0] = 21 [ 1298.275863][T12627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.315122][T12627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.336275][T12634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.344498][T12634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.353042][T12634] device bridge_slave_1 entered promiscuous mode [ 1298.360866][T12633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.367979][T12633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.376825][T12633] device bridge_slave_0 entered promiscuous mode [ 1298.387565][T12633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.395274][T12633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.404283][T12633] device bridge_slave_1 entered promiscuous mode [ 1298.416954][T12627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.424359][T12627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.450933][T12627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.462617][T12632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.480862][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.489251][T12632] device bridge_slave_0 entered promiscuous mode [ 1298.502490][T12632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.509720][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.517828][T12632] device bridge_slave_1 entered promiscuous mode [ 1298.570730][T12633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.597139][T12634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.615057][T12634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.626091][T12633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.642987][T12632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.700460][T12627] device hsr_slave_0 entered promiscuous mode [ 1298.748690][T12627] device hsr_slave_1 entered promiscuous mode [ 1298.798547][T12627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1298.806213][T12627] Cannot create hsr debugfs directory [ 1298.840962][T12632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.853357][T12634] team0: Port device team_slave_0 added [ 1298.883900][T12634] team0: Port device team_slave_1 added [ 1298.900673][T12633] team0: Port device team_slave_0 added [ 1298.932555][T12633] team0: Port device team_slave_1 added [ 1298.964153][T12632] team0: Port device team_slave_0 added [ 1298.981892][T12634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.989973][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.016005][T12634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.029518][T12634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.036501][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.063657][T12634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.076769][T12632] team0: Port device team_slave_1 added [ 1299.094926][T12633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.102068][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.128457][T12633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.141527][T12633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.148705][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.175339][T12633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.274626][T12632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.282091][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.309386][T12632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.380564][T12634] device hsr_slave_0 entered promiscuous mode [ 1299.429069][T12634] device hsr_slave_1 entered promiscuous mode [ 1299.488581][T12634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1299.496195][T12634] Cannot create hsr debugfs directory [ 1299.524060][T12632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.531190][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.558160][T12632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.630462][T12633] device hsr_slave_0 entered promiscuous mode [ 1299.680341][T12633] device hsr_slave_1 entered promiscuous mode [ 1299.708829][T12633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1299.716610][T12633] Cannot create hsr debugfs directory [ 1299.774041][T12649] chnl_net:caif_netlink_parms(): no params data found [ 1299.873162][T12632] device hsr_slave_0 entered promiscuous mode [ 1299.928791][T12632] device hsr_slave_1 entered promiscuous mode [ 1299.969315][T12632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1299.976895][T12632] Cannot create hsr debugfs directory [ 1300.006437][ T734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.015220][ T734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.024943][ T734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.032923][ T734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.043068][ T734] device bridge_slave_1 left promiscuous mode [ 1300.049786][ T734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.119041][ T734] device bridge_slave_0 left promiscuous mode [ 1300.125274][ T734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.191185][ T734] device veth1_macvtap left promiscuous mode [ 1300.197799][ T734] device veth0_macvtap left promiscuous mode [ 1300.204799][ T734] device veth1_vlan left promiscuous mode [ 1300.211596][ T734] device veth0_vlan left promiscuous mode [ 1300.538892][ T734] device hsr_slave_0 left promiscuous mode [ 1300.578827][ T734] device hsr_slave_1 left promiscuous mode [ 1300.640496][ T734] team0 (unregistering): Port device team_slave_1 removed [ 1300.655209][ T734] team0 (unregistering): Port device team_slave_0 removed [ 1300.668156][ T734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.735517][ T734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.854444][ T734] bond0 (unregistering): Released all slaves [ 1301.095017][T12649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.103174][T12649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.114219][T12649] device bridge_slave_0 entered promiscuous mode [ 1301.150995][T12649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.158106][T12649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.167171][T12649] device bridge_slave_1 entered promiscuous mode [ 1301.214639][T12649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.229321][T12649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.297189][T12649] team0: Port device team_slave_0 added [ 1301.313818][T12649] team0: Port device team_slave_1 added [ 1301.378857][T12649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.385943][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.412199][T12649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.448036][T12649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.455393][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.482259][T12649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.601661][T12649] device hsr_slave_0 entered promiscuous mode [ 1301.638873][T12649] device hsr_slave_1 entered promiscuous mode [ 1301.724715][T12627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.810110][T12627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.829790][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1301.837622][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1301.863589][T12633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.886217][T12632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.899173][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1301.907953][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1301.916851][T12547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.924044][T12547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.951645][T12634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.981936][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1301.991121][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1302.007572][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1302.020750][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1302.029771][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1302.038189][T12561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.045449][T12561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.053284][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1302.072880][T12633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.088245][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1302.097246][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1302.105815][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1302.115207][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1302.124244][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1302.133648][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.140766][T12560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.153591][T12632] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.177849][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1302.187174][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1302.196546][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1302.205383][ T2868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.212541][ T2868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.252949][T12634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.265805][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1302.279614][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1302.288138][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1302.300818][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1302.310066][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1302.319146][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1302.327424][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1302.335531][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1302.343860][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1302.352923][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1302.361616][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1302.370433][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.377484][T12659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.393714][T12627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1302.407474][T12627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1302.427452][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1302.437368][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1302.446029][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1302.456159][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1302.464673][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1302.474499][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1302.483320][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1302.492503][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.499633][T12659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.554274][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1302.563465][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1302.572737][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1302.582526][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1302.592006][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1302.601261][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1302.610919][T11914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.618000][T11914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.625792][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1302.635022][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1302.643614][T11914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.650730][T11914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.658881][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1302.667351][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1302.675981][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1302.684183][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1302.740149][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1302.756759][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1302.767039][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1302.776313][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1302.785080][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1302.793785][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1302.803761][T12633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1302.840374][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1302.847983][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1302.857686][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1302.867312][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1302.876245][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1302.885042][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1302.906779][T12627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.929970][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1302.937908][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1302.946858][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1302.956898][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1302.966410][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1302.978147][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1302.995084][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1303.004315][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1303.022288][T12634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1303.035461][T12634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1303.061425][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1303.070400][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1303.089510][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1303.098923][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1303.123356][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1303.131391][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1303.149756][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1303.159252][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1303.192928][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.206963][T12632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1303.238770][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1303.247559][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1303.305498][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1303.320271][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1303.341851][T12634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.364606][T12649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.404876][T12632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.417568][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1303.439135][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1303.447999][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1303.459936][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1303.470035][T12627] device veth0_vlan entered promiscuous mode [ 1303.495410][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1303.504549][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1303.538865][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1303.546684][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1303.568957][T12627] device veth1_vlan entered promiscuous mode [ 1303.584072][T12649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.635543][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1303.644229][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1303.653395][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1303.665390][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1303.674787][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.682077][T12561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.690450][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1303.699409][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1303.743912][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1303.752131][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1303.760893][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1303.769756][T12561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.776833][T12561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.785309][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1303.794465][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1303.803789][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1303.849229][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1303.861102][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1303.870070][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1303.879388][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1303.888250][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1303.901917][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1303.910922][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1303.939536][T12633] device veth0_vlan entered promiscuous mode [ 1303.981296][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1303.989476][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1303.997412][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1304.006752][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1304.017203][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1304.026439][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1304.035861][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1304.052980][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1304.062006][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1304.074297][T12627] device veth0_macvtap entered promiscuous mode [ 1304.097633][T12649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1304.111936][T12649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1304.130189][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1304.140488][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1304.149683][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1304.158027][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1304.167373][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1304.177131][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1304.187283][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1304.196276][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1304.204767][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1304.214291][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1304.222414][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1304.233418][T12632] device veth0_vlan entered promiscuous mode [ 1304.250089][T12627] device veth1_macvtap entered promiscuous mode [ 1304.266155][T12633] device veth1_vlan entered promiscuous mode [ 1304.275756][T12634] device veth0_vlan entered promiscuous mode [ 1304.335008][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1304.344035][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1304.354129][T12634] device veth1_vlan entered promiscuous mode [ 1304.364540][T12632] device veth1_vlan entered promiscuous mode [ 1304.399807][T12649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.407956][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1304.422080][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.432800][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1304.443711][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.453865][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1304.465339][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.475313][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1304.486087][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.496491][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1304.507134][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.518810][T12627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.548843][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1304.557720][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1304.567364][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1304.577236][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1304.605010][T12633] device veth0_macvtap entered promiscuous mode [ 1304.632891][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1304.643969][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.654746][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1304.666315][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.676390][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1304.687713][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.697656][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1304.708239][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.718209][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1304.729335][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.741426][T12627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.766744][T12634] device veth0_macvtap entered promiscuous mode [ 1304.776884][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1304.786496][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1304.796296][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1304.805219][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1304.815692][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1304.825229][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1304.834277][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1304.844505][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1304.859699][T12632] device veth0_macvtap entered promiscuous mode [ 1304.875107][T12634] device veth1_macvtap entered promiscuous mode [ 1304.886197][T12633] device veth1_macvtap entered promiscuous mode [ 1304.913255][T12632] device veth1_macvtap entered promiscuous mode [ 1305.080066][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1305.088130][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1305.119424][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1305.127743][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1305.163471][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1305.179151][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1305.207514][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.219276][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.229651][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.240585][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.258541][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.258579][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.258596][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.258602][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.258620][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.313264][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.323291][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.333803][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.345617][T12632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.356638][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.382879][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.404561][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.427735][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.448432][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.468359][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.478233][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.500357][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.518447][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.548411][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.558826][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.570056][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.580304][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.591339][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.603974][T12634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.620362][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.631099][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.643211][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.654250][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.664626][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.675701][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.686259][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.700042][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.710423][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.721433][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.738349][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.758327][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.768866][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.779379][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.789285][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1305.799871][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.812391][T12633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.820551][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1305.830923][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1305.840194][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1305.849618][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1305.858739][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1305.867331][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1305.876734][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1305.886094][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1305.898585][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1305.918356][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.928230][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1305.952772][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 23:09:16 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:09:16 executing program 2: r0 = socket(0x6, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) mkdir(&(0x7f0000000040)='./file0\x00', 0x100) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0xd2200, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) sendmmsg(r1, &(0x7f0000001440)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x1, 0x0, {0xa, 0x4e24, 0x1d, @rand_addr="676115331fccb56f7a1c3d1fc8f1ff52"}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000000240)="0d3a7aa9f133958d916d88752e2746c3ac38c5f7169f98f9998a586d82a2cfc4af1e594c672ba60e11e69fc11574401abdc3d2c611b70f61d7ada0e4091a8a06", 0x40}, {&(0x7f0000000280)="dd21f7c95a06825b0073ec1803639dd03aecf6eab0aa2bf56f47567ea696a3764ac3f90f0d98554d39f323d5e27bb23719dbfa681882a9ec7d0866fe378de886920dc763b2a02642a5c454ad4b23fc367f435b12cc10d571707bda68b7dff40a53ecc949d0ea69a2a3e2d79bfdd561c4d319fb363bb05c6f3dbbfede3b8e7ceb81a7a70b457797620a34500fd9b82b5a058322fb7fc14df425dabd088f1d96", 0x9f}, {&(0x7f0000000340)="331d173ce6ffa403bd853fa16504e1fe936304e7e79c7358d8f99006d5d2e8c645fb87ea4e7a93d1c23d9e2adc5750f6e55e08ef1f9099f49cb33a5edde8aee53562c263bfd294dd4f83c303b2256e06cff45925943b5051ef2f74917d008d45611f71760acc6d9a7895a644e143", 0x6e}, {&(0x7f00000003c0)="ca1b30ea7cb88802e9c69e00e1ae893dd8970e7bb2fba308516ce5544213de8dea33fcaf7eb37d62dbecfcd3718e31fdcd41693121a1b6138675ed25ed1743b423a4c9b858a8eddd41d33f4250be432c34fcd178f4c9b736b57867bae4c55808ee76949cced4c5d5f54a3524a12d863b659255a4", 0x74}, {&(0x7f0000000440)="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", 0xff}, {&(0x7f0000000540)="70fc6c3e7d28ef53e83c4121821bfdab61c5d2fdec30eb70ce90bedc902b982ac044890de1263867449301c87435afa8f9d15720a5beb8f7e6cf529d1f24562d3ac0c6ee9fde47ab77deffeb0234f9b91f852ce977e5f3fa474bcdc76a7e1df6dcd7097520ee0855331c3f71e6f409343b95d4c4f0becd87a0dc57660f2be211ead0dc9610af28294dbeeda7be717c9c9c8eb9abe653b604dd5fd7b0e6df201de47f390e8019237af07b1952544693092473e812de2db0e5", 0xb8}, {&(0x7f0000000600)="fcc7852136d0b3b0ada77934dec08f55ebc28256320e16b15cdfe464b2d6afbc78b0a352e75e29331ee083da283e14a4dd41cf7ecd7fa552bf067a8dc6ec5adbc28b4471a1c2a05ef1e335a99b123549955323d387b4446efa707bf531bd195de3d895a1729887b3e941a053903a86e966c96d6d6b6a029548510d5b3539bc88cb80aaea270fb3b51d79adad2e8b829e2762f519a1625f61f375db43d9001c57b4ea7508d6058b63957235125e767e16a5b2481a65496a74d49bbb22c7e58c159ab8d60ee680084ec93217ba34369a19a4213f9041130656bea78076aab9fb0523c33c0285dd055ef7949b246a709b9504be0304", 0xf4}], 0x8, &(0x7f0000000780)=[{0x108, 0xff, 0xa8, "6492d40ef573c24d91a63c5c3d625999ce8c0d85c5cc73cbdf0b2ff5f5ed6ece190f18d136bf185cd7750ff4c4d95b2f5df5c91cb368e2528436b1f7744ebd119515cde39e4b0d29b1fee853441061fe10722c0240093167d0a5b5ada6ddbc11a06c3883def240b1db9920c82f88a019afe963258ac2f94fae7db85f3fb6fbcf4d11dc7a80d2fd80eb3a5d00a4c4ebb5883643eeb85ddce1c433f96e58601ffdad8a9ecf9edf1b642f2c15423ed9cfe721699cd7894fc65da6e1ee345aa7d14a73dbaad37856fbd323665be65589cf677e07b7d829f388ea0fa104893839c8776ccb01daf4f59cee2bee89b9e60757bcf6210a0aefd5dc88"}], 0x108}}, {{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x1, 0x1, 0x2, 0x4}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)="2cc91d9cb45feb6ab69dd27d1c13cf61b5d5e6a4abb97b4d4174032b348206cc74b2cb49c895511bba88b5f67c78bd0e4b2fdd4f0b958234e125dcafe883654691350b99685f1344ae83e9e0bed6a564b149dd40df2cf2010d1297436a45d378ed915c3c81857a9dcdb72f3a874d8a46d79538c330085d574ad6a2e09b92867dd6694303ac84f28562cf0cca0e5a1196ec457326176f715abaf14fc1cbf019eee068d89b24143eb6dddd401bca6456085c23e3b2d534ba8e8ebb6cf6a3a135199b23a2b09b2ee118cf2b63ce6ad0e0c82c0ae06dd07d6093fbad6e9f610aefe60cebcce315489d42424b17aa64f715eb914b239f", 0xf4}, {&(0x7f0000000a40)="44ada9757306feedc50bcd9d37e48d1e7dbebfb3a8c356f246ad28cf4160f0617048bbfcc911b73739d1516aeb63aebe471a959008478a0ef792b1391c9dc0fae3efc97e29b9ca0a644aa86d3fa8a4640f4266ea", 0x54}, {&(0x7f0000000ac0)="627076862af9083779235d80b9a9f91bae1b74a50eb79b0f89e8cb2ac5ff26bcc9092ae406abfa921b8f6ab1557a47b0ff892f2bda49252e19cf844c17ab1103632b33840f21c0be245fbee6aeff0abf35aab7b575fcc6301f5abddf7b11ba1a9e97a740a88e97f4625092585d13194a4f91665dc8a89d8bbcf0d17d74cad284656913097c02cf99dc6cb69ec942eaceff0dde6e48ba3db89ec92fd236bd65bfb1d1d5414573b460bb78ed15c36ea5381a7c46", 0xb3}, {&(0x7f0000000b80)="6fcdc35cfb85d369fcf10d8ec99505d6005cf9ea7e99b4a945b281e0d0660ed6991ce6837b52aad1a69a4da4ef0fb46a6e3fa89eeaef5fccfc6b37cd05975ea762fbed9b0b989c645b4a9f3ce8de6cbacde44f1d6d2c82c024bfa88f3a9423df58f3a12fc12ffdd6bcc87d64f05a4ab971175ccb5cce55fa822c893ebbf52ece404cadd5181fa8d2f305be4bb90c7ae5dea763faf461fcff2e7649f4603e1d7881d402d2e2a8c66cd5b024e7f4", 0xad}, {&(0x7f0000000c40)="28b9322d6c5423e6568d938c29037d291411912f07c293e561a49026269e21f8b0fae207c6735e0f5d58013cd2560d2886c21f3e3bc368d79dfb64ec5251945f2aae1358ba7e9301ad7fad9239aedc6a88f31699", 0x54}, {&(0x7f0000000cc0)="8dd2fc41779f2a2a75e2295c5217687c760a310aa8b26b46a105e275c916e2671e7a257aaeeab1d4df53f9b0e230e9f20b", 0x31}], 0x6}}, {{&(0x7f0000000d80)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="e9029ac4c31157c8182937c4ecb73f9a44800ba2634910ab0985165048ec610ddd20d44516170656b709d583cfb964eaeabdf90f8ef4024eb55b45ad682f5e7661edd79c8590241beff512cc8f3b2f9c9e9648619cfd6909f3274c238a43b7a560de0a1fb391e7c07b8b3826affaf75f529c51c08884cb988d024b9164b1a1fe5732544aa32097bd712faf78bb2fa1fbe15d3cda95602ec05100e74626c9c96654de1f6f13c08435c0e277cde6ab22dd24e9c27397d3a61ba2c84d5b904a08d138368f4d1c4c1755d2e13c745eea43a9f2b4414bd8218da7d467d2c8009f192dd08c334ffa6f9b1db22e6e", 0xeb}], 0x1, &(0x7f0000000f40)=[{0x80, 0x10c, 0x45d, "1198f2c3dfb467a758ca8e67569bd530a82a6e846f00ad7040fcde8d9e40b9d7a692af133b2018e9079371d7d9400f5b16ad42d7e0a691ca1af898f7d6bdc5df6ea0b63cdf3c948e9fa9db98f25e6ac5b3ed10cd4966c0b9d308bc5d2ab34e9d75c87cd63b353afba4ac3b"}, {0xf8, 0x10b, 0x27, "9e2fdf5b2021549f6a90195129b88e50720e8905e9bbf3d7bbbca9c17dfeccad2dd6772c5f53b3a0fdefc46904b91b892f2fdf53abe8cccce6c6ee8ac4bec751dd4ee65db5e473de5bf8a2e87d0486eb569823bcba9aaf981d7614c37775255c1ce6dbb0d840584f0a5086f01a4b6b8599a2ef6848b445f55f83c3e3a7e0a12e9b90a8fcac6d74bf56f5d85a1f8aefd0b8c24d516785a9b29396c0ab4b7d5e486855d87820a005783fb89b4008db9d323a433d3e552dc96b2fb9d0ee022ba49c8ef4399d198a4586b160f8220beec20eb0453f7246e28791a5336850986dc82fa06b35"}, {0x60, 0x29, 0x80000001, "01857de560857654ea13892c07161bbb41dd5feebce643d6feb02a0769e73e45a729b546e5b1d82a2922394a7e3b1475885f00038b549f17398524eb0838deeba44ab2679c484f48c66c8c"}, {0x60, 0x10d, 0x9, "5d9f0f18f07009a530249dd17191dfce1d316fab040af39a48d0a1d8abdf1dee54479cfb2a8128b6c1cfa87aa7c007726e496f07c7c67f27ecfba8a8602e021d299ab52d3c864d8c4a"}, {0x60, 0x1, 0x5, "ec8d3ca0fb384473b2434f96f46d094df70d24e0c97c83b4ee9685a1efcdf28241ec9ea3deeafa90de7d1265cbe529949b333059ea1cd2b7d7eb8964d5bbccb8b49cec42464e73cee8609dbf72ca6316"}, {0x98, 0x104, 0x5, "6bf99c80d1fddff95de644defc64bc42825b72ffc62f2b91a5393f433633a54971d0c696275332145e6cde4a8ed010c1214d3ebb6f9d0a98c3f0865d78a8042708dc9b7eb209dced7335b9519f9fa577536ec5c7fb9ee63b3509012f3bdd4c099707679b45fff133f84a6aca02083b0050ecffef71d0da3c1e5c1c52d62113e635e406aa481f58b7"}, {0x100, 0x101, 0x2, "67c522e96df78b2f84e10785d7d83f82ae05f5679bf42a10114b124d9c0f840c0711a64babe530251effbe2fca4b670c518e1da16b6e22e7583ea2e0d1d471367a3026428d92738ebe2a558029806c7bad7f2b1ff41ef61300cbbe005367948610422f8c0ea9754661d03e4386abaeee27f87415a98963e871a98e963dc560e31a3d86493d98959eee1f7c2e9e007fc0b0a0c8315fe562943b6ae7d3c199830fea50dbad04930d8077cc0d9c8055019393204300433e011489f426a849705d3212c42d043d54ace330709da124225db3f43b1be5b26f673c1f1ceb7cbbabf754eeab7143b01b3a6231a810a931"}, {0x98, 0x113, 0x0, "9c9830c85e8013eac138a6c181a57ca3db7b83a033c787b8bb35b60ee856fa22803527326b70a30588e04d140e570cfdd04036e8e3bf2dee522a38805250b6d8ca6deea096dba9685561992b18cbec96d9a927e61c8791dce4a4c49f2e0a53129a7ab9d2fee058838aa54835595b7a6b835efd8a7f9e02b9c0b87d921b194b49707ea544f187"}], 0x4c8}}], 0x3, 0x40004) [ 1305.964763][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1305.975437][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.985364][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1305.995926][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.005899][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.017259][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.027359][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.037943][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.060382][T12632] batman_adv: batadv0: Interface activated: batadv_slave_1 23:09:16 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket(0x26, 0x800, 0x30) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @rc={0x1f, @any, 0x1f}, @xdp={0x2c, 0x1, 0x0, 0x8}, @llc={0x1a, 0x337, 0x2, 0x4, 0x8c, 0x40, @random="77b132778981"}, 0x3b1f, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000100)='ipvlan1\x00', 0xffffffffffffffb5, 0x107b200000, 0x1}) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000001c0)={0x634, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wireguard0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x604, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3c}}}, {0x5, 0x3, 0x7a}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ce656dda9117486c659da06119784bd6c5dee5fe43a5206d0f8de5be1f9c0de7"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x52c5, @mcast1, 0x200}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x52c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0xe}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x6d}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x2}, {0x5, 0x3, 0x13}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x8}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x6a}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x12}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x76}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x4c}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b55a8fa7649a29c53b950764ed86998731b96e137d5395b738e9474fd0735ca7"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @d}, @WGPEER_A_ALLOWEDIPS={0x394, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x14}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x61}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x10}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5, 0x3, 0x3c}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="d8e20698226580fbc4804e3ec0c974d0"}, {0x5, 0x3, 0x49}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x72}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x12}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0xc167}, {0x5, 0x3, 0x20}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x17}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3d}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5, 0x3, 0x2e}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0xe}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2a}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xd}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x68}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}}, {0x5, 0x3, 0x1a}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x1d}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x10}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x48}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xe}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x68}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x17}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x10}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x634}, 0x1, 0x0, 0x0, 0x200080c0}, 0x804) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000008c0)={0x1, &(0x7f0000000880)=[{0x3, 0x40, 0x5, 0x5}]}) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 1306.067984][T12649] device veth0_vlan entered promiscuous mode [ 1306.107647][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.122001][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.148379][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.168358][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.184251][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.246297][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.287442][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.308424][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.326816][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.349839][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.371582][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.394662][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.419225][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.443163][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.467619][T12633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.483645][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1306.497141][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1306.505358][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1306.514474][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1306.523898][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1306.533037][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1306.542747][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.553969][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.564082][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.575801][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.586020][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.596668][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.606689][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.617310][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.627307][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.638066][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.648135][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.671545][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.692965][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.715012][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.736862][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1306.759968][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.784503][T12634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.848055][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1306.863876][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1306.892254][T12649] device veth1_vlan entered promiscuous mode [ 1307.274164][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1307.289022][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1307.312670][T12649] device veth0_macvtap entered promiscuous mode [ 1307.366526][ T27] audit: type=1804 audit(1580771358.015:176): pid=12718 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir552273374/syzkaller.XMIlH7/0/bus" dev="sda1" ino=16631 res=1 [ 1307.440557][T12649] device veth1_macvtap entered promiscuous mode [ 1307.547664][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1307.574965][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.597175][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1307.621925][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.641518][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1307.666640][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.691837][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1307.715465][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.737396][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1307.762897][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.785834][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1307.809386][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.832786][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1307.858199][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.881733][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1307.905104][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.926974][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1307.953454][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.975594][T12649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.087222][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1308.100747][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1308.129718][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1308.147778][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1308.157761][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1308.171440][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.181708][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1308.192359][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.202256][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1308.216886][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.226784][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1308.237427][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.247396][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1308.258919][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.269141][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1308.280493][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.290425][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1308.300942][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.310855][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1308.321336][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.332047][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1308.343557][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.355577][T12649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.367785][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1308.377527][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1308.683245][ T27] audit: type=1804 audit(1580771359.335:177): pid=12729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir706333888/syzkaller.wdtp5F/0/file0/bus/bus" dev="overlay" ino=16672 res=1 23:09:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:09:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:09:20 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x20) write$P9_RREAD(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r2, 0x0, 0x40000, 0x4) r3 = socket$kcm(0xa, 0x2, 0x11) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f0000000040)=r4, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000300)=""/240, &(0x7f0000000140)=0xf0) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) sendmmsg$inet(r4, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="79b863577a7db334e3dded", 0xb}, {&(0x7f00000001c0)="82f6cfb620db15d54a339ada360c1c35cb812c1c44781a5c042edb28061250cf46a5fd76790b64", 0x27}, {&(0x7f0000000200)}], 0x3, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}], 0x18}}], 0x1, 0xc1) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000080)=@ethernet={0x6, @random="63981e02423d"}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000180), 0x62}, 0x0) fallocate(r3, 0x42, 0x5, 0x10fffa) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xd000000, r2, 0x0, 0x8}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 23:09:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:09:20 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:09:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) [ 1309.529793][ T27] audit: type=1804 audit(1580771360.175:178): pid=12733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir552273374/syzkaller.XMIlH7/1/bus" dev="sda1" ino=16688 res=1 [ 1309.594400][T12739] IPVS: length: 240 != 8 23:09:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1310.277155][T12739] IPVS: length: 240 != 8 23:09:21 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1310.393723][T12750] overlayfs: missing 'lowerdir' 23:09:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000000300009001000000000000900100000000000090010000680200006802000068020000680200006802000003000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000300190010000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000066736d00000000000000000000000000bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc0506efeb70b5bc8c2d4ba3a94a2d2393e3182f64694d7d05fb478c8f56627a5cf905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8410000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000ac1e0001e000000200000000000000006873723000000000000000000000000069703667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d800f2ffffff000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) r1 = accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00'}) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 1310.579109][ T27] audit: type=1804 audit(1580771361.225:179): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir706333888/syzkaller.wdtp5F/1/file0/bus/bus" dev="overlay" ino=16685 res=1 [ 1392.300043][ T27] audit: type=1804 audit(1580771361.325:180): pid=12759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir552273374/syzkaller.XMIlH7/2/bus" dev="sda1" ino=16695 res=1 23:10:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:10:45 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:10:45 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'bridge_slave_0\x00', {}, 0x7f}) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 23:10:46 executing program 5: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:10:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:10:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:10:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) [ 1397.445063][T12766] IPVS: ftp: loaded support on port[0] = 21 [ 1397.524267][T12766] chnl_net:caif_netlink_parms(): no params data found [ 1397.573635][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.581788][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.590560][T12766] device bridge_slave_0 entered promiscuous mode [ 1397.600089][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.607255][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.624787][T12766] device bridge_slave_1 entered promiscuous mode [ 1397.647251][T12766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.661437][T12766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.686835][T12766] team0: Port device team_slave_0 added [ 1397.697028][T12766] team0: Port device team_slave_1 added [ 1397.717600][T12766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.725247][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.751808][T12766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.765715][T12766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.773240][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.799781][T12766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.861880][T12766] device hsr_slave_0 entered promiscuous mode [ 1397.918924][T12766] device hsr_slave_1 entered promiscuous mode [ 1397.968415][T12766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.976043][T12766] Cannot create hsr debugfs directory [ 1398.094203][T12773] IPVS: ftp: loaded support on port[0] = 21 [ 1398.172665][T12774] IPVS: ftp: loaded support on port[0] = 21 [ 1398.202278][T12775] IPVS: ftp: loaded support on port[0] = 21 [ 1398.257239][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.264516][T12766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.272764][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.279921][T12766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.366931][T12773] chnl_net:caif_netlink_parms(): no params data found [ 1398.611974][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.619297][T12779] IPVS: ftp: loaded support on port[0] = 21 [ 1398.629802][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.709300][T12783] IPVS: ftp: loaded support on port[0] = 21 [ 1398.736848][T12775] chnl_net:caif_netlink_parms(): no params data found [ 1398.746704][T12773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.754048][T12773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.762655][T12773] device bridge_slave_0 entered promiscuous mode [ 1398.772799][T12773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.780488][T12773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.788727][T12773] device bridge_slave_1 entered promiscuous mode [ 1398.809703][T12774] chnl_net:caif_netlink_parms(): no params data found [ 1398.894876][T12766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.913576][T12773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.927890][T12773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.037281][T12773] team0: Port device team_slave_0 added [ 1399.046536][T12773] team0: Port device team_slave_1 added [ 1399.079985][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.087270][T12775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.103937][T12775] device bridge_slave_0 entered promiscuous mode [ 1399.116598][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1399.125136][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1399.141100][T12766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.155769][T12774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.163285][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.172615][T12774] device bridge_slave_0 entered promiscuous mode [ 1399.187246][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.195534][T12775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.214036][T12775] device bridge_slave_1 entered promiscuous mode [ 1399.245999][T12774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.255475][T12774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.264320][T12774] device bridge_slave_1 entered promiscuous mode [ 1399.280968][T12773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.287956][T12773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.314925][T12773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.329379][T12773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.336496][T12773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.362756][T12773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.381141][T12775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.394334][T12775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.440958][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1399.450788][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1399.459798][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.466865][T12560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.503613][T12775] team0: Port device team_slave_0 added [ 1399.521128][T12774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.547165][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1399.557014][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1399.566280][T12547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.573436][T12547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.581365][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1399.617706][T12775] team0: Port device team_slave_1 added [ 1399.643279][T12774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.699662][T12773] device hsr_slave_0 entered promiscuous mode [ 1399.748892][T12773] device hsr_slave_1 entered promiscuous mode [ 1399.788525][T12773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1399.796165][T12773] Cannot create hsr debugfs directory [ 1399.817741][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1399.839538][T12775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.846630][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.874699][T12775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.930675][T12775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.937676][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.981192][T12775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.072363][T12775] device hsr_slave_0 entered promiscuous mode [ 1400.128944][T12775] device hsr_slave_1 entered promiscuous mode [ 1400.168417][T12775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1400.176019][T12775] Cannot create hsr debugfs directory [ 1400.184569][T12774] team0: Port device team_slave_0 added [ 1400.202805][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1400.212004][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1400.243903][T12774] team0: Port device team_slave_1 added [ 1400.250453][T12779] chnl_net:caif_netlink_parms(): no params data found [ 1400.269991][T12783] chnl_net:caif_netlink_parms(): no params data found [ 1400.281104][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1400.291239][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1400.300221][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1400.322134][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1400.331035][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1400.340060][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1400.349205][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1400.416880][T12774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.424165][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1400.451130][T12774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1400.463965][T12766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1400.505303][T12774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1400.516661][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1400.548565][T12774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.623539][T12783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.630964][T12783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.640059][T12783] device bridge_slave_0 entered promiscuous mode [ 1400.650954][T12783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.658049][T12783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.666957][T12783] device bridge_slave_1 entered promiscuous mode [ 1400.772087][T12774] device hsr_slave_0 entered promiscuous mode [ 1400.839043][T12774] device hsr_slave_1 entered promiscuous mode [ 1400.878520][T12774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1400.886104][T12774] Cannot create hsr debugfs directory [ 1400.903944][T12779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.912419][T12779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.921532][T12779] device bridge_slave_0 entered promiscuous mode [ 1400.946402][T12783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.972406][T12779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.981663][T12779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.991625][T12779] device bridge_slave_1 entered promiscuous mode [ 1400.999468][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1401.007024][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1401.027033][T12783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.071505][T12766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.109005][T12783] team0: Port device team_slave_0 added [ 1401.179053][T12783] team0: Port device team_slave_1 added [ 1401.187456][T12779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.244720][T12779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.302460][T12783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.310464][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.336877][T12783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.384572][T12783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.403919][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.439816][T12783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.464224][T12779] team0: Port device team_slave_0 added [ 1401.543609][T12783] device hsr_slave_0 entered promiscuous mode [ 1401.599080][T12783] device hsr_slave_1 entered promiscuous mode [ 1401.638468][T12783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.646062][T12783] Cannot create hsr debugfs directory [ 1401.653570][T12779] team0: Port device team_slave_1 added [ 1401.698248][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1401.707324][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1401.762683][T12766] device veth0_vlan entered promiscuous mode [ 1401.781501][T12779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.790442][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.817479][T12779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.843526][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1401.853065][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1401.878030][T12766] device veth1_vlan entered promiscuous mode [ 1401.887797][T12779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.896638][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.924062][T12779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.938784][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1401.946626][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1401.956009][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1402.033488][T12775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.120594][T12779] device hsr_slave_0 entered promiscuous mode [ 1402.168997][T12779] device hsr_slave_1 entered promiscuous mode [ 1402.208524][T12779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1402.216148][T12779] Cannot create hsr debugfs directory [ 1402.317432][T12766] device veth0_macvtap entered promiscuous mode [ 1402.356559][T12775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.400287][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1402.429846][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1402.448984][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1402.456985][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1402.472074][T12766] device veth1_macvtap entered promiscuous mode [ 1402.518088][T12773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.525733][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1402.535627][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1402.545846][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1402.555113][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1402.565024][T12659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.572144][T12659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.581271][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1402.590189][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1402.599380][T12659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.606443][T12659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.675299][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1402.689526][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1402.709299][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1402.729812][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1402.764263][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1402.788414][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.818388][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1402.838321][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.858375][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1402.889885][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.908425][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1402.928343][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.938210][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1402.968909][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.988409][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1403.008396][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.026455][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1403.049291][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.068493][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1403.088437][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.108428][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1403.138386][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.148397][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1403.168361][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.190241][T12766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.222286][T12774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.253813][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1403.276122][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1403.286104][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1403.296244][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1403.305850][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1403.325951][T12773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.353303][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.364260][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.374690][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.385682][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.396095][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.407157][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.417344][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.428297][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.438155][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.450310][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.461477][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.472396][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.482578][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.498362][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.508192][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.548418][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.568341][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.587533][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.597554][T12766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1403.608441][T12766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.620578][T12766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.635137][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1403.651709][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1403.660844][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1403.670080][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1403.680662][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1403.738410][T12774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.781758][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1403.790518][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1403.801137][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1403.809673][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1403.817630][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1403.827739][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1403.836671][T12547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.843788][T12547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.852308][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1403.861633][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1403.884870][T12547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.892173][T12547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.984076][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1403.992422][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1404.002795][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1404.015060][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1404.075908][T12775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1404.129219][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1404.140281][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1404.162986][ T2868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.170186][ T2868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.198757][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1404.209487][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1404.218769][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1404.227263][ T2868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.234408][ T2868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.242298][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1404.259968][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1404.269500][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1404.278833][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1404.349298][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1404.361231][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1404.370760][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1404.379632][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1404.387280][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1404.396344][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 23:10:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000180)={0x10000, "55bfa4bbb279522a4d34fa04f642f64ea180ab0612d44e83855f9ddada9dbadb", 0x20, 0x1, 0x8, 0x8, 0x1}) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) write$P9_RREAD(r1, &(0x7f0000000180)=ANY=[], 0xfffffe5a) fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x10fffe) fdatasync(r1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r5, @ANYBLOB="02002dbd7000fedbdf250600000008000600080000000c0002800800090000100000080006000800000008000500010001001400028008000400fdffffff08000500c0ffffff0c0002800800080004000000500002800800040009000000060002004e200000060002004e24000014000100ac1414bb00000000000000000000000005000d000100000006000f00608b0000080006000500000008000900f8ffffff080006000104000012f9d21be36d7886185ee7a81be1874194ee466a34866d2880c0354d498ba3b441fe17464f2e29a5bca34827f43b95718e82dcf010efd0502fa58872fefd"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x40080) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8}) ioctl$TIOCSBRK(r1, 0x5427) r6 = socket(0x22, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x37, 0x0, &(0x7f0000000000)) [ 1404.454175][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1404.476289][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1404.505936][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1404.529826][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1404.549138][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1404.569816][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1404.588874][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1404.598979][T11914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1404.633725][T12775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.666161][T12783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.687932][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1404.709981][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1404.729048][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1404.737590][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1404.768033][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1404.790937][T12773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1404.825376][T12774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1404.895267][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1404.904567][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1404.955092][T12783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.987171][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1404.998904][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1405.015294][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1405.034531][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1405.067090][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1405.079183][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1405.087667][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.094823][T12560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.126664][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1405.151171][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1405.170302][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1405.189152][T12560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.196276][T12560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.222726][T12773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.288726][T12774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.308940][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1405.325755][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1405.353866][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1405.373187][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1405.408923][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1405.418050][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1405.472027][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1405.495526][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1405.529841][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1405.553853][T12779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.580182][T12819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1405.599120][T12819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1405.607876][T12819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1405.629217][T12819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1405.639024][T12819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1405.647055][T12819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1405.692758][T12775] device veth0_vlan entered promiscuous mode [ 1405.756468][T12779] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.776309][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1405.790204][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 23:10:56 executing program 2: r0 = socket(0x11, 0x80000, 0xbb) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000040)="0b632a674607d8ddcbd0d3c7249a19c57e0d8df07ca546acf71e1e85a8c50d43eb40e97cc826d93c7d3c16f1cd93e3604764f52320acfbdaf8cf819eb3a35467ca7370fb5099e689be134be48805799bf22cf7f67c5f6ffff362b490b599b7212c725967e54b9825f39764dd389056c6b5cc56e234e7a999f09528239f607062ea3671775db87a6d8f8e43665c467dc3930abce42570bf3aa768fcf26fcd976f06aee30c9ebd4b238caf20e267a4f351043d544d9b1b4f38eea109da45c9c075c81b28ea39f8aaf51040fd35fc6272df612b35ba8bad1ba534d8bf89194ff5df0ae4b81b2b7c9a3c4ac7ad434e5f0c7657aefd34") getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0xfffffc61) pause() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r2, 0x0, 0x40000, 0x4) fallocate(r1, 0x0, 0x0, 0x10fffe) fdatasync(r2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x103400, 0x0) write$vhost_msg(r3, &(0x7f00000003c0)={0x1, {&(0x7f00000001c0)=""/222, 0xde, &(0x7f00000002c0)=""/216, 0x3, 0x4}}, 0x48) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000440)={0x80, 0x6, 0x3ab, @local, 'veth1_to_bond\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xd000000, r2, 0x3, 0x20000000000008, 0x0, 0x1ff}) openat$cgroup_ro(r2, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r6, 0x0, 0x40000, 0x4) fallocate(r5, 0x0, 0x0, 0x10fffe) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xd000000, r6, 0x0, 0x8}) r7 = openat(r6, &(0x7f0000000480)='./file0\x00', 0x6a2d43, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0xab9535e9a6578fc1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84050}, 0x40011) [ 1405.809225][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1405.829029][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1405.837390][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1405.846311][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1405.864271][T12775] device veth1_vlan entered promiscuous mode [ 1405.875700][T12783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1405.950149][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1405.960341][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1405.969621][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1405.984425][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1405.993366][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.000531][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.009001][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1406.017976][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1406.027227][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.034600][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.048594][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1406.057665][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1406.067717][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1406.099462][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1406.108150][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1406.145527][T12773] device veth0_vlan entered promiscuous mode [ 1406.156240][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1406.165235][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1406.174111][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1406.183896][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1406.193413][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1406.202925][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1406.212540][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1406.220708][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1406.229206][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1406.261314][T12783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.290649][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.301405][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1406.311231][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1406.323116][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1406.333087][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1406.343004][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1406.353173][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1406.362571][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1406.386420][T12779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1406.402866][T12775] device veth0_macvtap entered promiscuous mode [ 1406.414856][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1406.427714][T12773] device veth1_vlan entered promiscuous mode [ 1406.463035][T12775] device veth1_macvtap entered promiscuous mode [ 1406.476240][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1406.485940][T12659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1406.513672][T12774] device veth0_vlan entered promiscuous mode [ 1406.541233][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1406.559046][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1406.605651][T12774] device veth1_vlan entered promiscuous mode [ 1406.632893][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.658513][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.678819][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.710980][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.788351][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.858440][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.888768][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.918416][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.948404][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1406.998386][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.028345][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1407.058785][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.088371][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1407.118810][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.148338][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1407.178580][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.209206][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1407.248347][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.258227][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1407.308426][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.338361][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1407.369091][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.408836][T12775] batman_adv: batadv0: Interface activated: batadv_slave_0 23:10:58 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000080)) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) [ 1407.509763][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1407.518188][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1407.549326][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1407.588453][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1407.619277][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1407.627063][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1407.678877][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1407.719186][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 23:10:58 executing program 2: r0 = socket(0x15, 0x6, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x4d2, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r5, 0x1b6}, 0x8) [ 1407.764307][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1407.808589][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.858676][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1407.898441][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.938389][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1407.978695][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 23:10:58 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) [ 1408.019288][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1408.089821][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.117615][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1408.158381][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.168260][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 23:10:58 executing program 2: r0 = socket(0x2c, 0x80000, 0x3f) r1 = add_key$user(&(0x7f00000000c0)='user\x00', 0x0, 0x0, 0xa6, 0xfffffffffffffffd) keyctl$get_security(0x11, r1, &(0x7f0000000280)=""/130, 0x82) keyctl$setperm(0x5, r1, 0x10000400) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040)=0x1, 0x4) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000080)=0x1, 0x4) [ 1408.233989][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.259319][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1408.338401][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.378362][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1408.418337][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.428207][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1408.478511][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.538398][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1408.568695][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.598559][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1408.638380][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.670342][T12775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.722506][T12779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.743279][T12773] device veth0_macvtap entered promiscuous mode [ 1408.793409][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1408.810085][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1408.829050][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1408.849052][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1408.919490][T12774] device veth0_macvtap entered promiscuous mode [ 1408.950219][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1408.969974][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1409.009081][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1409.029163][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1409.049023][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1409.113274][T12783] device veth0_vlan entered promiscuous mode [ 1409.133199][T12773] device veth1_macvtap entered promiscuous mode [ 1409.164969][T12774] device veth1_macvtap entered promiscuous mode [ 1409.190110][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1409.197939][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1409.229204][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1409.259021][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1409.533980][T12783] device veth1_vlan entered promiscuous mode [ 1409.564334][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.588180][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.618390][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.640144][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.667494][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.679588][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.690069][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.701364][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.730675][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.741325][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.751234][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.761858][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.772193][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.782725][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.792669][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.803299][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.813199][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.823753][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.833728][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.844231][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.854929][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.865464][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.875433][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.885961][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.897451][T12773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.929564][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.942229][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.952177][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.963309][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.973373][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1409.983858][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.993846][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.004387][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.014598][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.025512][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.035682][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.046441][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.056515][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.067144][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.077122][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.087630][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.105824][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.116382][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.126513][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.137072][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.146967][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.157549][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.167537][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.178701][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.188640][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1410.199140][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.211095][T12774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.231082][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1410.240524][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1410.249878][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1410.259645][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1410.269032][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1410.277910][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1410.286750][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1410.295554][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1410.311994][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.322989][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.333941][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.344453][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.354336][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.364849][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.374737][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.385259][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.395223][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.405736][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.416151][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.426700][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.436801][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.447322][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.457172][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.467759][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.477747][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.488260][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.499449][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.509955][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.520144][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.530755][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.540800][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.551406][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.563395][T12773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.584758][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.607927][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.618702][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.629676][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.641006][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.653977][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.664414][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.674974][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.685195][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.695700][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.705937][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.716443][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.727353][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.738240][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.748293][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.760085][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.770021][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.780603][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.790514][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.801061][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.811069][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.821654][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.831588][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.842133][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.853000][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1410.863572][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.875954][T12774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.073724][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1411.083047][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1411.092587][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1411.102653][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1411.226975][T12783] device veth0_macvtap entered promiscuous mode [ 1411.315154][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1411.342718][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1411.372348][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1411.394594][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1411.414065][T12910] overlayfs: failed to resolve './file0': -2 [ 1411.416762][T12779] device veth0_vlan entered promiscuous mode [ 1411.443870][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1411.459233][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1411.467239][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1411.518488][ T27] audit: type=1804 audit(1580771462.165:181): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir236466345/syzkaller.gl446B/0/bus/bus" dev="sda1" ino=16597 res=1 23:11:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x10fffe) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 23:11:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) [ 1412.219850][T12783] device veth1_macvtap entered promiscuous mode [ 1412.234064][T12779] device veth1_vlan entered promiscuous mode [ 1412.700287][T12943] overlayfs: missing 'lowerdir' [ 1413.424325][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1413.461955][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.493070][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1413.527120][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.560418][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1413.594309][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.625558][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1413.658540][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.691141][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1413.724172][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.756909][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1413.790074][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.822545][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1413.855978][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.887416][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1413.920572][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.953358][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1413.987945][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.018133][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1414.054246][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.086695][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1414.120767][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.152028][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1414.184168][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.218198][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1414.253498][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.284656][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1414.317790][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.363626][T12783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1414.399510][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1414.411886][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1414.532366][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1414.572693][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.605046][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1414.637849][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.671022][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1414.705160][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.737036][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1414.769834][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.802195][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1414.836350][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.868341][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1414.902493][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.937126][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1414.971351][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.003858][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.037823][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.068014][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.102186][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.123426][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.144070][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.175519][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.188986][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.199410][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.211485][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.223789][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.235239][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.245540][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.256467][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.273167][T12783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1415.285227][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1415.299060][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1415.307858][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1415.317664][T12547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1415.330547][T12779] device veth0_macvtap entered promiscuous mode [ 1415.364610][T12779] device veth1_macvtap entered promiscuous mode [ 1415.393943][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.418190][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.429544][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.440181][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.464919][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.478375][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.488793][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.499640][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.509562][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.520229][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.530614][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.541123][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.551044][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.561740][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.571677][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.582331][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.592287][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.604101][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.615019][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.625551][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.635509][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.645996][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.655880][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.666554][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.676673][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.687139][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.697281][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.707796][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.717675][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.728201][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.740543][T12779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.749106][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1415.761493][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1415.769821][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1415.779262][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1415.839626][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.851339][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.862208][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.872720][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.882586][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.893075][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.902935][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.913550][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.923445][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.934027][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.943921][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.954493][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.964467][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.974929][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.984814][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1415.995611][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.005700][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.016965][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.026925][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.037423][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.047276][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.057741][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.067604][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.078116][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.088000][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.098863][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.108778][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.119256][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.129149][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.139611][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.151423][T12779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.214084][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1416.223914][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1416.467642][ T27] audit: type=1804 audit(1580771467.115:182): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir252317379/syzkaller.OcJeR4/0/bus/bus" dev="overlay" ino=16648 res=1 23:11:07 executing program 5: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:11:07 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) 23:11:07 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1417.246258][T12969] overlayfs: failed to resolve './file0': -2 [ 1417.308576][ T27] audit: type=1804 audit(1580771467.955:183): pid=12969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir236466345/syzkaller.gl446B/1/bus/bus" dev="sda1" ino=16697 res=1 23:11:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) 23:11:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:11:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:11:08 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) keyctl$chown(0x2, 0x0, 0x0, r3) setfsgid(r3) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) r4 = dup3(r0, r1, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @initdev}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@can_delroute={0x14c, 0x19, 0x400, 0x70bd25, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_CS_CRC8={0x11e, 0x6, {0x15, 0x5a, 0x61, 0x3, 0x6, "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", 0x3, "d93654a304325d9243aa59d81f6eabad0be642ff"}}, @CGW_DST_IF={0x8, 0xa, r9}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8, 0x6, 0x5, 0x81}}, @CGW_MOD_UID={0x8, 0xe, r10}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048045) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 23:11:08 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1418.143177][ T27] audit: type=1804 audit(1580771468.795:184): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir252317379/syzkaller.OcJeR4/1/bus/bus" dev="overlay" ino=16641 res=1 [ 1418.334692][T12982] overlayfs: missing 'lowerdir' [ 1418.867518][T13006] overlayfs: failed to resolve './file0': -2 23:11:09 executing program 5: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:11:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1419.032766][ T27] audit: type=1804 audit(1580771469.685:185): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir236466345/syzkaller.gl446B/2/bus/bus" dev="sda1" ino=16702 res=1 23:11:10 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1419.625711][T13026] overlayfs: unrecognized mount option "./bus" or missing value [ 1419.910420][ T27] audit: type=1804 audit(1580771470.555:186): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir252317379/syzkaller.OcJeR4/2/bus/bus" dev="overlay" ino=16659 res=1 23:12:34 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1503.713570][ T27] audit: type=1804 audit(1580771470.815:187): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir236466345/syzkaller.gl446B/3/bus/bus" dev="sda1" ino=16702 res=1 23:12:38 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:12:38 executing program 2: r0 = socket(0x20000000000000a, 0x80000, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x80201, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@mcast1}}, 0xe8) r2 = accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c, 0x80c00) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={0x0, @generic={0x2b, "888d25a2dc7dc40f937f1c820cc4"}, @rc={0x1f, @none, 0x9}, @xdp={0x2c, 0x8, 0x0, 0x32}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)='wireguard1\x00', 0x5, 0x3b99, 0x1}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@remote, @remote, @local, 0x3, 0x1, 0x80, 0x0, 0x9, 0x1000000, r4}) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 23:12:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:12:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) 23:12:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:12:39 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1509.719461][ T734] tipc: TX() has been purged, node left! [ 1509.879210][ T734] tipc: TX() has been purged, node left! [ 1510.068493][ T734] tipc: TX() has been purged, node left! [ 1510.239264][ T734] tipc: TX() has been purged, node left! [ 1510.398566][ T734] tipc: TX() has been purged, node left! [ 1510.588479][ T734] tipc: TX() has been purged, node left! [ 1510.625069][T13073] IPVS: ftp: loaded support on port[0] = 21 [ 1510.714665][ T734] tipc: TX() has been purged, node left! [ 1510.758709][ T734] tipc: TX() has been purged, node left! [ 1510.764873][ T734] tipc: TX() has been purged, node left! [ 1510.848822][ T734] tipc: TX() has been purged, node left! [ 1511.043810][T13073] chnl_net:caif_netlink_parms(): no params data found [ 1513.757214][T13082] IPVS: ftp: loaded support on port[0] = 21 [ 1513.766476][T13073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.766713][T13093] IPVS: ftp: loaded support on port[0] = 21 [ 1513.779266][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.788856][T13073] device bridge_slave_0 entered promiscuous mode [ 1513.799522][T13084] IPVS: ftp: loaded support on port[0] = 21 [ 1513.838491][T13073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.838541][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.840639][T13085] IPVS: ftp: loaded support on port[0] = 21 [ 1513.859313][T13073] device bridge_slave_1 entered promiscuous mode [ 1513.885639][T13083] IPVS: ftp: loaded support on port[0] = 21 [ 1513.933492][T13073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.963748][T13073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1514.081848][T13073] team0: Port device team_slave_0 added [ 1514.117303][T13073] team0: Port device team_slave_1 added [ 1514.255131][T13073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.268088][T13073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.298420][T13073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.311971][T13073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.319401][T13073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.345442][T13073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.500691][T13073] device hsr_slave_0 entered promiscuous mode [ 1514.549076][T13073] device hsr_slave_1 entered promiscuous mode [ 1514.588418][T13073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1514.596034][T13073] Cannot create hsr debugfs directory [ 1514.621303][T13084] chnl_net:caif_netlink_parms(): no params data found [ 1514.659209][T13093] chnl_net:caif_netlink_parms(): no params data found [ 1514.692547][T13082] chnl_net:caif_netlink_parms(): no params data found [ 1514.725164][T13085] chnl_net:caif_netlink_parms(): no params data found [ 1514.891499][T13083] chnl_net:caif_netlink_parms(): no params data found [ 1515.062682][T13084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.070103][T13084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.084336][T13084] device bridge_slave_0 entered promiscuous mode [ 1515.092617][T13082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.102089][T13082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.111930][T13082] device bridge_slave_0 entered promiscuous mode [ 1515.120563][T13085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.127630][T13085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.138539][T13085] device bridge_slave_0 entered promiscuous mode [ 1515.170833][T13084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.177938][T13084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.189892][T13084] device bridge_slave_1 entered promiscuous mode [ 1515.197769][T13082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.205456][T13082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.214375][T13082] device bridge_slave_1 entered promiscuous mode [ 1515.235823][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.255517][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.263708][T13085] device bridge_slave_1 entered promiscuous mode [ 1515.274240][T13093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.282144][T13093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.295900][T13093] device bridge_slave_0 entered promiscuous mode [ 1515.361708][T13093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.369405][T13093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.377813][T13093] device bridge_slave_1 entered promiscuous mode [ 1515.444229][T13084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.453848][T13083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.463146][T13083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.472085][T13083] device bridge_slave_0 entered promiscuous mode [ 1515.483935][T13082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.504069][T13085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.523715][T13084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.536165][T13083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.549309][T13083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.557869][T13083] device bridge_slave_1 entered promiscuous mode [ 1515.581483][T13082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.603298][T13085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.620802][T13093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.662526][T13084] team0: Port device team_slave_0 added [ 1515.686097][T13084] team0: Port device team_slave_1 added [ 1515.714906][T13093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.732143][T13083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.751909][T13082] team0: Port device team_slave_0 added [ 1515.804079][T13083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.831022][T13085] team0: Port device team_slave_0 added [ 1515.839272][T13082] team0: Port device team_slave_1 added [ 1515.874694][T13084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.883523][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.909733][T13084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.933149][T13085] team0: Port device team_slave_1 added [ 1515.942871][T13093] team0: Port device team_slave_0 added [ 1515.961715][T13093] team0: Port device team_slave_1 added [ 1515.971560][T13083] team0: Port device team_slave_0 added [ 1515.999446][T13084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.006439][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.033528][T13084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.066312][T13083] team0: Port device team_slave_1 added [ 1516.137139][T13082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.145970][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.173618][T13082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.204661][T13093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.212051][T13093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.238479][T13093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.265933][T13085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.276895][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.303505][T13085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.317052][T13082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.336310][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.362829][T13082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.381483][T13093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.398437][T13093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.439400][T13093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.492380][T13084] device hsr_slave_0 entered promiscuous mode [ 1516.549266][T13084] device hsr_slave_1 entered promiscuous mode [ 1516.588602][T13084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1516.596202][T13084] Cannot create hsr debugfs directory [ 1516.602938][T13083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.611532][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.638184][T13083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.651210][T13085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.658203][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.686612][T13085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.740217][T13083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.747228][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.786236][T13083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.913533][T13093] device hsr_slave_0 entered promiscuous mode [ 1516.949157][T13093] device hsr_slave_1 entered promiscuous mode [ 1516.988473][T13093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1516.996117][T13093] Cannot create hsr debugfs directory [ 1517.052897][T13083] device hsr_slave_0 entered promiscuous mode [ 1517.109078][T13083] device hsr_slave_1 entered promiscuous mode [ 1517.158560][T13083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1517.166173][T13083] Cannot create hsr debugfs directory [ 1517.202343][T13085] device hsr_slave_0 entered promiscuous mode [ 1517.249033][T13085] device hsr_slave_1 entered promiscuous mode [ 1517.288636][T13085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1517.296277][T13085] Cannot create hsr debugfs directory [ 1517.352250][T13082] device hsr_slave_0 entered promiscuous mode [ 1517.398847][T13082] device hsr_slave_1 entered promiscuous mode [ 1517.438535][T13082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1517.446146][T13082] Cannot create hsr debugfs directory [ 1517.550538][T13073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.730723][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1517.739507][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1517.787130][T13073] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.883063][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1517.892115][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1517.901263][T12660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.908394][T12660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.925882][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1517.987130][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1517.999533][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1518.008073][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.015246][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.023908][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1518.033650][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1518.053475][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1518.063042][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1518.129150][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1518.137351][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1518.147837][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1518.224859][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1518.233836][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1518.247856][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1518.257711][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1518.349677][T13073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1518.501562][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1518.509900][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1518.545300][T13073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.633423][T13084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.656509][T13083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.679402][T13085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.704588][T13093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.761563][T13083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.780607][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1518.789811][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1518.797844][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1518.806104][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1518.820049][T13084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.864655][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1518.874374][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1518.882518][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1518.891650][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1518.900144][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.907207][T12561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.915296][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1518.924346][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1518.932825][T12561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.940061][T12561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.948112][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1518.956266][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1518.964456][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1518.973670][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1518.982520][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.989657][T12561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.003505][T13085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.021130][T13082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.034885][T13093] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.070718][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1519.081311][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1519.089588][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1519.098750][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1519.107753][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1519.117375][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1519.126627][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.133770][T13055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.142254][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1519.202674][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1519.212688][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1519.224560][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.231711][T12561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.243850][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1519.252267][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1519.260473][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1519.269523][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1519.278053][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.285215][T12561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.294016][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1519.303566][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1519.312628][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1519.341238][T13082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.374158][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1519.383514][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1519.392679][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1519.405048][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1519.415305][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.422471][T13055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.431414][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1519.440551][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1519.449713][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1519.458261][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.465504][T13055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.473827][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1519.483605][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1519.492734][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1519.502611][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1519.511868][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1519.521293][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1519.532271][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1519.541095][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1519.603629][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1519.619430][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1519.628122][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1519.651632][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1519.660738][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1519.670159][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1519.679301][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1519.687843][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1519.697372][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1520.547733][T13073] device veth0_vlan entered promiscuous mode [ 1520.566686][T13084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1520.576491][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1520.587195][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1520.596556][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1520.605985][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1520.615137][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1520.624250][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1520.634106][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1520.643375][T13055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.650523][T13055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.664917][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1520.675149][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1520.684287][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1520.695411][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1520.704275][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1520.717645][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1520.726443][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1520.736562][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1520.756200][T13083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1520.769460][T13083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1520.796963][T13073] device veth1_vlan entered promiscuous mode [ 1520.838612][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1520.849479][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1520.858082][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1520.868398][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1520.877264][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1520.891976][ T2775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.899127][ T2775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.907413][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1520.916665][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1520.925633][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1520.939944][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1520.949373][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1520.959755][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1520.983889][T13085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.031814][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1521.040458][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1521.048017][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1521.058777][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1521.067484][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1521.129500][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1521.138236][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.147910][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1521.162775][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.171516][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1521.182262][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1521.191298][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1521.203888][T13093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.239833][T13084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.252627][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1521.262009][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1521.279783][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1521.287312][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1521.329950][T13083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.362365][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1521.387834][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.397304][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1521.426322][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.435735][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1521.445101][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1521.455478][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1521.463563][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1521.477191][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.493105][T13073] device veth0_macvtap entered promiscuous mode [ 1521.541889][T13085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.551163][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1521.561295][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1521.578729][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1521.593582][T13073] device veth1_macvtap entered promiscuous mode [ 1521.627495][T13093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.660671][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1521.671235][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1521.685120][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1521.726221][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1521.739903][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1521.771855][T13082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.839055][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1521.855069][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.865554][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1521.876529][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.888177][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1521.899346][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.909860][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1521.921027][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.931308][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1521.942628][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.952910][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1521.964096][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.974513][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1521.985825][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.996455][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1522.007326][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.019576][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1522.030430][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.040750][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1522.051647][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.062194][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1522.073383][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.083846][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1522.095914][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.106185][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1522.117007][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.127252][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1522.138093][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.148103][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1522.159947][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.172229][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1522.183353][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.195899][T13073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.203970][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1522.214340][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1522.223933][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1522.234179][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1522.243610][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1522.254762][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1522.299340][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1522.307817][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1522.347691][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1522.356039][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1522.379592][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.398312][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.408148][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.420193][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.430579][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.441460][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.451807][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.462604][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.472818][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.483607][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.494445][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.505398][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.515574][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.526433][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.536614][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.547130][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.557001][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.567615][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.577978][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.588588][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.598672][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.609190][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.619150][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.629701][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.639611][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.650363][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.660401][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.671005][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.680973][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.691500][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.701400][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1522.712019][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.724069][T13073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.737358][T13084] device veth0_vlan entered promiscuous mode [ 1522.773178][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1522.782160][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1522.792050][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1522.801293][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1522.810827][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1522.820004][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1522.829351][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1522.837822][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1522.847474][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1522.855836][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1522.864274][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1522.872827][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1522.893340][T13085] device veth0_vlan entered promiscuous mode [ 1522.912807][T13083] device veth0_vlan entered promiscuous mode [ 1522.934720][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1522.944429][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1523.016794][T13083] device veth1_vlan entered promiscuous mode [ 1523.044616][T13085] device veth1_vlan entered promiscuous mode [ 1523.057309][T13084] device veth1_vlan entered promiscuous mode [ 1523.156781][T13093] device veth0_vlan entered promiscuous mode [ 1523.212366][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1523.229267][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1523.280035][T13093] device veth1_vlan entered promiscuous mode [ 1523.305792][T13082] device veth0_vlan entered promiscuous mode [ 1523.325667][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1523.333902][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1523.343215][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1523.352115][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1523.361638][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1523.403841][T13085] device veth0_macvtap entered promiscuous mode [ 1523.420254][T13083] device veth0_macvtap entered promiscuous mode [ 1523.444519][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1523.454290][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1523.462878][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1523.471369][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1523.480883][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1523.490056][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1523.499377][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1523.513118][T13082] device veth1_vlan entered promiscuous mode [ 1523.530597][T13085] device veth1_macvtap entered promiscuous mode 23:12:54 executing program 2: r0 = socket(0x11, 0x2, 0x3f) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 1523.551243][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1523.561684][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1523.570546][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1523.581208][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1523.589791][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1523.599273][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1523.607975][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1523.617163][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 23:12:54 executing program 2: r0 = socket(0x22, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) [ 1523.659949][T13083] device veth1_macvtap entered promiscuous mode 23:12:54 executing program 2: r0 = socket(0x23, 0xa, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000140)=""/4096) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001140)='/dev/ubi_ctrl\x00', 0x400, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000680)=ANY=[@ANYBLOB='z'], 0x1) fallocate(r4, 0x0, 0x40000, 0x4) fallocate(r3, 0x0, 0x0, 0x10fffe) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xd000000, r4, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000080)={0x3, 0x6, 0x8}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000011c0)={0x17, 0x12, &(0x7f0000001180)="6dc2c572e9c5d439c6d3d535630af44c1fc0"}) [ 1523.880589][T13163] Unknown ioctl -2133043935 [ 1523.997441][T13166] Unknown ioctl -2133043935 23:12:54 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 23:12:54 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6, @in6}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0xffffffffffffffff) r1 = socket(0xb, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x5c) 23:12:55 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000000300009001000000000000900100000000000090010000680200006802000068020000680200006802000003000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000300190010000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000066736d00000000000000000000000000bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc0506efeb70b5bc8c2d4ba3a94a2d2393e3182f64694d7d05fb478c8f56627a5cf905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8410000000093be9342473ceafc0053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000ac1e0001e000000200000000000000006873723000000000000000000000000069703667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d800f2ffffff000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000080)=0xfffffffffffffe7d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)=ANY=[@ANYBLOB='r'], 0x1) fallocate(r3, 0x0, 0x40000, 0x4) fallocate(r2, 0x0, 0x0, 0x10fffe) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xd000000, r3, 0x0, 0x8}) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x3e) [ 1524.913072][T13093] device veth0_macvtap entered promiscuous mode [ 1524.928715][T13084] device veth0_macvtap entered promiscuous mode [ 1524.936546][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1524.945635][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1524.954377][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1524.963455][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1525.004060][T13082] device veth0_macvtap entered promiscuous mode [ 1525.016695][T13093] device veth1_macvtap entered promiscuous mode [ 1525.059101][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1525.067764][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1525.083199][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.094796][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.105558][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.116792][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.127481][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.138765][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.148726][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.159502][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.169674][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.180388][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.190323][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.201085][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.211333][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.222148][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.232219][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.242779][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.253127][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.263727][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.273671][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.284274][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.299738][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.310853][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.321474][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.332465][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.342810][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.353890][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.364480][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.375367][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.385714][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.396454][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.406633][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.417761][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.427984][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1525.438675][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.451135][T13083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.462785][T13084] device veth1_macvtap entered promiscuous mode [ 1525.477553][T13082] device veth1_macvtap entered promiscuous mode [ 1525.505208][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1525.526290][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1525.534728][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1525.544274][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1525.557696][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.576704][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.587065][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.598799][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.609746][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.621013][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.631382][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.642396][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.652720][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.663734][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.674785][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.685408][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.696239][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.707179][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.717548][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.728132][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.738513][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.749082][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.759232][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.770287][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.780215][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.791073][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.800998][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.811701][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.821752][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.832363][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.842671][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.853970][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.864014][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.874544][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.884511][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.895160][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.905219][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1525.915758][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.927933][T13083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.968827][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1525.977827][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1526.001251][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.012137][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.022670][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.033786][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.044150][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.055155][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.065124][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.075659][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.086109][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.097176][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.107524][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.118617][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.128896][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.139945][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.150373][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.161265][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.171558][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.182573][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.192881][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.203799][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.214229][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.224801][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.234994][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.245683][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.255767][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.266367][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.276295][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.287278][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.297349][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.307926][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.318052][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.328772][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.338961][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.349656][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.359807][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.370511][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.382658][T13093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.414675][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.425375][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.436340][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.447344][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.457996][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.468988][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.479269][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.490586][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.501086][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.512106][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.522468][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.534374][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.544772][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.555757][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.566733][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.578796][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.589084][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.600586][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.610890][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.621969][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.632316][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.643334][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.654553][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.666760][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.677442][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.688544][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.698865][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.709884][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.720188][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.731793][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.742110][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.753011][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.763286][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.774221][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.784554][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.796458][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.806892][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.818734][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.831601][T13085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.847784][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.860083][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.870536][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.881595][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.892318][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.903291][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.913703][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.925700][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.936085][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.947204][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.957511][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.968599][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.979535][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1526.990393][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.000653][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.011597][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.022047][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.032997][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.043408][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.055893][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.066227][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.077223][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.087659][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.098688][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.108930][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.119982][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.130777][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.141706][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.151961][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.163250][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.173567][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.185462][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.195891][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.206870][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.217807][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.244408][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.255005][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.266023][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.276415][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1527.287294][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.305819][T13084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.316808][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1527.338163][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1527.347290][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1527.356640][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1527.366196][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1527.376082][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1527.476172][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.499035][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.509845][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.520780][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.531468][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.542377][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.552765][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.563795][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.574459][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.586418][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.596981][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.608840][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.621041][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.632069][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.642403][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.653382][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.663820][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.674832][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.685460][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.698428][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.709700][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.720643][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.731013][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.742148][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.752474][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.763602][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.774669][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.785772][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.796046][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.806985][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.817304][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.828330][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.838166][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.850484][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.860827][T13084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.871683][T13084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.884159][T13084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.892672][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.903329][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.913827][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.924344][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.934424][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.945520][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.955924][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.966851][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.977182][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1527.987866][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.997829][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.008897][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.019199][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.030043][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.040453][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.051431][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.061711][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.072639][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.082974][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.094187][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.104604][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.115639][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.125726][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.136411][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.146316][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.157040][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.167213][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.178153][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.188476][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.199211][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.209155][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.219663][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.229716][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.240214][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.250328][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.260841][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.270864][T13093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.281796][T13093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.294074][T13093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1528.309825][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.320717][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.331068][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.342112][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.352359][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.363266][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.374465][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.385456][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.395783][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.406761][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.417451][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.428379][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.438221][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.449239][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.459515][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.470308][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.480471][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.491795][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.502986][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.513854][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.524043][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.534870][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.545063][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.555991][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.566377][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.577620][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.588042][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.598934][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.609122][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.619954][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.631022][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.641865][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.653539][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.664418][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.674685][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.685532][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.695945][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.706931][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.717167][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1528.728046][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.742048][T13085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1528.806005][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1528.817725][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.828118][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1528.838995][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.849302][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1528.860129][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.870311][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1528.881133][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.893009][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1528.903969][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.914264][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1528.925097][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.935326][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1528.946310][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.956500][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1528.967329][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.979180][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1528.991301][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.001574][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.012631][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.023821][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.034690][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.044993][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.056630][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.066942][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.077727][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.087976][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.098925][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.109102][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.120077][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.131687][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.142531][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.153662][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.164499][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.174699][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.185538][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.195722][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.206694][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.217803][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.228897][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.239257][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1529.250215][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.262931][T13082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.278123][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1529.309674][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1529.325824][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1529.338066][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1529.349091][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1529.358972][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1529.368177][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1529.378494][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1529.423769][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.436759][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.447253][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.459844][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.470490][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.481555][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.491991][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.503052][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.513638][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.524679][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.536364][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.547451][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.557885][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.569087][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.579469][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.590785][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.601348][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.612481][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.623073][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.634338][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.644852][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.655925][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.667378][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.678491][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.689156][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.700118][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.710627][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.721696][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.732190][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.743216][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.753656][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.764647][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.776128][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.787137][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.798745][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.809855][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.820263][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.831289][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.841832][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.853204][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.863812][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1529.874991][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.887849][T13082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.990449][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1530.009103][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1530.324732][T13190] overlayfs: unrecognized mount option "./bus" or missing value [ 1530.490542][ T27] audit: type=1804 audit(1580771581.145:188): pid=13194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir781884956/syzkaller.vlrNkG/0/bus/bus" dev="overlay" ino=16547 res=1 [ 1530.937217][ T27] audit: type=1804 audit(1580771581.585:189): pid=13200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir127094376/syzkaller.P0ycKM/0/bus/bus" dev="sda1" ino=16705 res=1 23:14:18 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:14:18 executing program 2: socket(0x20000000000000a, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x15, &(0x7f0000000180)}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000000)=0xfffffe6f) 23:14:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) 23:14:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:14:18 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1607.802634][T13211] overlayfs: unrecognized mount option "./bus" or missing value 23:14:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x3}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:14:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:14:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:14:21 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:14:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) [ 1610.919300][T13221] overlayfs: unrecognized mount option "./bus" or missing value 23:14:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1611.860948][T13238] overlayfs: unrecognized mount option "./bus" or missing value 23:14:23 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:14:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:14:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:14:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) [ 1612.840117][T13245] overlayfs: unrecognized mount option "./bus" or missing value 23:14:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:14:23 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r0, 0x0, r2) 23:14:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) 23:14:24 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) prctl$PR_SET_UNALIGN(0x6, 0x0) 23:14:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) [ 1614.778030][T13273] IPVS: ftp: loaded support on port[0] = 21 [ 1614.897101][T13273] chnl_net:caif_netlink_parms(): no params data found [ 1614.958403][T13273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.965580][T13273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.974685][T13273] device bridge_slave_0 entered promiscuous mode [ 1614.984658][T13273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.991965][T13273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.000871][T13273] device bridge_slave_1 entered promiscuous mode [ 1615.027645][T13273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.041410][T13273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.072754][T13273] team0: Port device team_slave_0 added [ 1615.082110][T13273] team0: Port device team_slave_1 added [ 1615.105154][T13273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.112347][T13273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.138830][T13273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.153815][T13273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.161350][T13273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.188100][T13273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.272207][T13273] device hsr_slave_0 entered promiscuous mode [ 1615.329018][T13273] device hsr_slave_1 entered promiscuous mode [ 1615.368412][T13273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1615.376029][T13273] Cannot create hsr debugfs directory [ 1615.403517][T13278] IPVS: ftp: loaded support on port[0] = 21 [ 1615.614947][T13278] chnl_net:caif_netlink_parms(): no params data found [ 1615.630715][T13273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.637810][T13273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.645252][T13273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.652345][T13273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.740851][T13278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.748020][T13278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.757555][T13278] device bridge_slave_0 entered promiscuous mode [ 1615.769350][T13278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.776523][T13278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.785861][T13278] device bridge_slave_1 entered promiscuous mode [ 1615.823128][T13278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.841803][T13278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.852849][ T2857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.869809][ T2857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.912320][T13278] team0: Port device team_slave_0 added [ 1615.932089][T13278] team0: Port device team_slave_1 added [ 1615.989221][T13278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.996231][T13278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1616.022523][T13278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.044168][T13273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.053765][T13278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.063517][T13278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1616.089943][T13278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.129963][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1616.138180][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1616.194099][T13278] device hsr_slave_0 entered promiscuous mode [ 1616.239224][T13278] device hsr_slave_1 entered promiscuous mode [ 1616.278489][T13278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1616.286101][T13278] Cannot create hsr debugfs directory [ 1616.294451][T13273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1616.320290][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1616.330842][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1616.340145][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.347232][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1616.378855][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1616.388825][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1616.397594][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.404740][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.426949][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1616.456973][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1616.499252][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1616.510133][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1616.526016][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1616.549716][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1616.559570][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1616.584009][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1616.598175][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1616.607293][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1616.616989][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1616.633487][T13273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1616.692750][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1616.702217][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1616.735418][T13273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.490053][T13278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.538187][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1617.549485][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1617.557733][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1617.567435][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1617.597368][T13278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.617817][T13273] device veth0_vlan entered promiscuous mode [ 1617.627776][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1617.637662][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1617.677155][T13273] device veth1_vlan entered promiscuous mode [ 1617.686178][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1617.699061][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1617.707036][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1617.729568][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1617.738862][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1617.747399][T12660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.754576][T12660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.763495][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1617.772978][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1617.782129][T12660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.789274][T12660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1617.799910][T12660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1617.829849][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1617.838127][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1617.880658][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1617.891299][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1617.903976][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1617.933142][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1617.942727][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1617.952309][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1617.962094][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1617.971157][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1618.003907][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1618.012864][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1618.028940][T13278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1618.038109][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1618.054749][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1618.068066][T13273] device veth0_macvtap entered promiscuous mode [ 1618.098092][T13273] device veth1_macvtap entered promiscuous mode [ 1618.147280][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1618.159327][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1618.167734][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1618.175990][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1618.200725][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.211389][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.221923][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.232827][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.243089][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.254268][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.264627][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.275841][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.286196][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.297180][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.307856][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.318858][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.330509][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.341507][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.351813][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.362962][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.373254][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.384180][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.394476][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.405405][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.415998][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.426910][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.437191][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.448158][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.458482][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.470786][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.481071][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.492430][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.502685][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.513686][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.524183][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.535073][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.545641][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.556731][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.567135][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.579990][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.590438][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.602329][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.612589][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.623462][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.633759][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.644737][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.655742][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1618.666678][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.679505][T13273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1618.700643][T13278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1618.717086][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1618.726504][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1618.757783][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.780198][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.796108][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.807165][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.817738][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.828762][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.839064][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.849975][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.860257][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.871205][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.881641][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.893144][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.904330][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.916351][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.926746][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.937673][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.948013][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.959183][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.969521][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1618.980591][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1618.991034][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.002031][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.012438][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.023334][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.033638][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.045599][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.056200][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.067159][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.077592][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.088550][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.098848][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.109988][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.120281][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.131405][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.141732][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.152626][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.162941][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.174893][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.185329][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.196263][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.206617][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.217743][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.228138][T13273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1619.239073][T13273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.251723][T13273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1619.259866][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1619.270244][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1619.464870][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1619.475065][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1619.543176][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1619.555854][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1619.593299][T13278] device veth0_vlan entered promiscuous mode [ 1619.603060][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1619.620864][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1619.642450][T13278] device veth1_vlan entered promiscuous mode [ 1619.692364][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1619.705217][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1619.712168][ T27] audit: type=1804 audit(1580771670.355:190): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir324822219/syzkaller.DuYfGl/0/bus/bus" dev="overlay" ino=16656 res=1 [ 1619.714250][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1619.759375][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1619.780214][T13278] device veth0_macvtap entered promiscuous mode [ 1619.806564][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1619.827056][T13278] device veth1_macvtap entered promiscuous mode [ 1619.907843][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1619.935951][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.957296][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1619.981007][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.002410][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.028239][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.050000][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.073197][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.094665][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.117836][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.139990][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.163484][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.186622][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.209904][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.231416][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.254628][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.277479][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.299811][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.321351][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 23:14:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1620.350630][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.360596][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.371203][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.381130][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 23:14:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) 23:14:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) [ 1620.391635][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.401822][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.428387][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.445267][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.456581][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.469365][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.480510][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.491212][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.502341][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.512873][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.524201][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.535874][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.547056][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.558136][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.570423][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.580969][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.592083][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.602564][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.613828][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.624301][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.635458][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.645977][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1620.664234][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.677438][T13278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1620.705316][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1620.721857][T13055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1620.772565][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1620.847397][ T27] audit: type=1804 audit(1580771671.495:191): pid=13308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir324822219/syzkaller.DuYfGl/1/file0/bus/bus" dev="overlay" ino=16653 res=1 [ 1620.898882][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.909339][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1620.921346][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.931821][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1620.943766][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.954281][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1620.965333][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.981363][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.004979][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.027836][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.052986][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.074755][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.098636][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.121651][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.144387][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.166182][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.190817][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.212498][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.236295][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.258170][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.281834][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.305413][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.328763][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.350699][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.374637][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.396276][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.419957][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.445887][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.469095][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.490781][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.514488][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.538094][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.566569][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.576758][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.587270][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.597519][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.608055][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.618738][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.629313][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.639214][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.649842][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.659871][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.670468][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.681218][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1621.692861][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.707765][T13278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1621.724278][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1621.740970][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1622.085971][ T27] audit: type=1804 audit(1580771672.735:192): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir759928238/syzkaller.OJtp3L/0/bus/bus" dev="sda1" ino=16634 res=1 23:14:33 executing program 4: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 23:14:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x28}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x38}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0x42) 23:14:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:14:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e655099c3297c1120a4df3867e3d1c84b02a277686f848cffe1dea"}}}}, 0xfdef) 23:14:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) 23:14:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x40000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) [ 1622.914082][T13327] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 1623.020973][ T27] audit: type=1804 audit(1580771673.665:193): pid=13322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir324822219/syzkaller.DuYfGl/2/file0/bus/bus" dev="overlay" ino=16710 res=1 [ 1623.049215][T13327] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1728.018274][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1728.025357][ C1] (detected by 1, t=10502 jiffies, g=40581, q=46) [ 1728.031881][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10499 (4295109938-4295099439), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1728.045253][ C1] syz-executor.2 R running task 22904 13326 13073 0x80004000 [ 1728.053173][ C1] Call Trace: [ 1728.056462][ C1] [ 1728.059462][ C1] sched_show_task.cold+0x2ee/0x35d [ 1728.064693][ C1] ? can_nice.part.0+0x20/0x20 [ 1728.069595][ C1] rcu_sched_clock_irq.cold+0xb23/0xc37 [ 1728.075384][ C1] update_process_times+0x2d/0x70 [ 1728.080515][ C1] tick_sched_handle+0xa2/0x190 [ 1728.085390][ C1] tick_sched_timer+0x53/0x140 [ 1728.090184][ C1] __hrtimer_run_queues+0x364/0xe40 [ 1728.095420][ C1] ? tick_sched_do_timer+0x1b0/0x1b0 [ 1728.100751][ C1] ? hrtimer_init+0x330/0x330 [ 1728.105552][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1728.111294][ C1] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 1728.117399][ C1] hrtimer_interrupt+0x314/0x770 [ 1728.122638][ C1] smp_apic_timer_interrupt+0x160/0x610 [ 1728.128216][ C1] apic_timer_interrupt+0xf/0x20 [ 1728.133157][ C1] [ 1728.136121][ C1] RIP: 0010:write_comp_data+0x9/0x70 [ 1728.141416][ C1] Code: 13 00 00 8b 80 84 13 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 5d c3 0f 1f 00 65 4c 8b 04 25 c0 1e 02 00 <65> 8b 05 e8 e8 8c 7e a9 00 01 1f 00 75 51 41 8b 80 80 13 00 00 83 [ 1728.161156][ C1] RSP: 0018:ffffc90005ca70a8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1728.169584][ C1] RAX: 0000000000040000 RBX: 0000000000000800 RCX: ffffffff839e0831 [ 1728.177583][ C1] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000007 [ 1728.185655][ C1] RBP: ffffc90005ca70b0 R08: ffff88809a89e500 R09: ffffed1015d2707c [ 1728.193680][ C1] R10: ffffed1015d2707b R11: ffff8880ae9383db R12: 0000000000000009 [ 1728.201676][ C1] R13: 0000000000000008 R14: 0000000000000800 R15: ffffc90005ca7700 [ 1728.209786][ C1] ? iov_iter_advance+0xc1/0xe20 [ 1728.214767][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1728.221108][ C1] iov_iter_advance+0xc1/0xe20 [ 1728.226016][ C1] generic_perform_write+0x338/0x540 [ 1728.231341][ C1] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4b0/0x4b0 [ 1728.239592][ C1] ? down_write+0xdf/0x150 [ 1728.244108][ C1] ? file_modified+0x85/0xa0 [ 1728.248795][ C1] ext4_buffered_write_iter+0x1fe/0x460 [ 1728.254369][ C1] ext4_file_write_iter+0x1fe/0x14e0 [ 1728.259726][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1728.265310][ C1] ? __this_cpu_preempt_check+0x35/0x190 [ 1728.270976][ C1] ? ext4_buffered_write_iter+0x460/0x460 [ 1728.276806][ C1] do_iter_readv_writev+0x5f8/0x8f0 [ 1728.282064][ C1] ? no_seek_end_llseek_size+0x70/0x70 [ 1728.287627][ C1] ? apparmor_file_permission+0x27/0x30 [ 1728.293248][ C1] ? rw_verify_area+0x126/0x360 [ 1728.298127][ C1] do_iter_write+0x184/0x610 [ 1728.302748][ C1] ? rcu_read_lock_any_held+0xcd/0xf0 [ 1728.308257][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1728.313583][ C1] vfs_iter_write+0x77/0xb0 [ 1728.318230][ C1] ovl_write_iter+0x5b9/0xc20 [ 1728.322943][ C1] ? ovl_compat_ioctl+0x80/0x80 [ 1728.327825][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1728.334089][ C1] ? iov_iter_init+0xee/0x220 [ 1728.338799][ C1] new_sync_write+0x4d3/0x770 [ 1728.343523][ C1] ? new_sync_read+0x800/0x800 [ 1728.348407][ C1] ? generic_pipe_buf_release+0x1e6/0x250 [ 1728.354195][ C1] __vfs_write+0xe1/0x110 [ 1728.358549][ C1] __kernel_write+0x11b/0x3b0 [ 1728.363351][ C1] write_pipe_buf+0x15d/0x1f0 [ 1728.368073][ C1] ? do_splice_direct+0x2a0/0x2a0 [ 1728.373145][ C1] ? splice_from_pipe_next.part.0+0x2a2/0x350 [ 1728.379247][ C1] __splice_from_pipe+0x3ee/0x7c0 [ 1728.384302][ C1] ? do_splice_direct+0x2a0/0x2a0 [ 1728.389359][ C1] ? do_splice_direct+0x2a0/0x2a0 [ 1728.394519][ C1] splice_from_pipe+0x108/0x170 [ 1728.399394][ C1] ? splice_shrink_spd+0xd0/0xd0 [ 1728.404535][ C1] ? security_file_permission+0x8f/0x380 [ 1728.410204][ C1] default_file_splice_write+0x3c/0x90 [ 1728.415798][ C1] ? generic_splice_sendpage+0x50/0x50 [ 1728.421279][ C1] direct_splice_actor+0x123/0x190 [ 1728.426412][ C1] splice_direct_to_actor+0x3b4/0xa30 [ 1728.431802][ C1] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1728.437369][ C1] ? do_splice_to+0x180/0x180 [ 1728.442076][ C1] ? rw_verify_area+0x126/0x360 [ 1728.446946][ C1] do_splice_direct+0x1da/0x2a0 [ 1728.451820][ C1] ? splice_direct_to_actor+0xa30/0xa30 [ 1728.457384][ C1] ? rcu_read_lock_any_held+0xcd/0xf0 [ 1728.462792][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1728.469056][ C1] ? __this_cpu_preempt_check+0x35/0x190 [ 1728.474706][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1728.481079][ C1] ? __sb_start_write+0x1e5/0x460 [ 1728.486126][ C1] do_sendfile+0x597/0xd00 [ 1728.490576][ C1] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1728.495871][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1728.502131][ C1] ? put_timespec64+0xda/0x140 [ 1728.506996][ C1] ? __x64_sys_futex+0x404/0x590 [ 1728.511987][ C1] __x64_sys_sendfile64+0x1dd/0x220 [ 1728.517214][ C1] ? __ia32_sys_sendfile+0x230/0x230 [ 1728.522522][ C1] ? do_syscall_64+0x26/0x790 [ 1728.527293][ C1] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1728.532649][ C1] ? trace_hardirqs_on+0x67/0x240 [ 1728.537711][ C1] do_syscall_64+0xfa/0x790 [ 1728.542252][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1728.548168][ C1] RIP: 0033:0x45b399 [ 1728.552089][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1728.571708][ C1] RSP: 002b:00007fb8a3185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1728.580143][ C1] RAX: ffffffffffffffda RBX: 00007fb8a31866d4 RCX: 000000000045b399 [ 1728.588169][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1728.596267][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1728.604278][ C1] R10: 00008400fffffffa R11: 0000000000000246 R12: 00000000ffffffff [ 1728.612277][ C1] R13: 00000000000008ca R14: 00000000004ca24d R15: 000000000075bf2c [ 1728.620301][ C1] rcu: rcu_preempt kthread starved for 10558 jiffies! g40581 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1728.631499][ C1] rcu: RCU grace-period kthread stack dump: [ 1728.637399][ C1] rcu_preempt R running task 29264 10 2 0x80004000 [ 1728.645316][ C1] Call Trace: [ 1728.648637][ C1] __schedule+0x934/0x1f90 [ 1728.653078][ C1] ? __sched_text_start+0x8/0x8 [ 1728.657947][ C1] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1728.664076][ C1] ? schedule_timeout+0x47c/0xc50 [ 1728.669131][ C1] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1728.674448][ C1] schedule+0xdc/0x2b0 [ 1728.678597][ C1] schedule_timeout+0x486/0xc50 [ 1728.683474][ C1] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1728.689317][ C1] ? usleep_range+0x170/0x170 [ 1728.694021][ C1] ? trace_hardirqs_on+0x67/0x240 [ 1728.699094][ C1] ? __next_timer_interrupt+0x1a0/0x1a0 [ 1728.704818][ C1] ? swake_up_one+0x60/0x60 [ 1728.709372][ C1] rcu_gp_kthread+0xa10/0x1940 [ 1728.714171][ C1] ? rcu_note_context_switch+0x1980/0x1980 [ 1728.720013][ C1] ? trace_hardirqs_on+0x67/0x240 [ 1728.725072][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1728.731408][ C1] ? __kthread_parkme+0x108/0x1c0 [ 1728.736511][ C1] ? __kasan_check_read+0x11/0x20 [ 1728.741567][ C1] kthread+0x361/0x430 [ 1728.745650][ C1] ? rcu_note_context_switch+0x1980/0x1980 [ 1728.751498][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1728.757236][ C1] ret_from_fork+0x24/0x30