0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:39 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.mems\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x70, 0x18000000000, 0x1, 0x3819, 0x5, 0x0, 0x0, 0xcc408, 0x0, 0x9, 0x81, 0x3, 0x0, 0xf1a, 0x4, 0xcaa3, 0x4c9, 0x4, 0x80000001, 0xffffffff, 0x9, 0x4, 0x5, 0x5, 0x7690, 0xc3e, 0x101, 0x3, 0x101, 0x6, 0xffffffffffffffff, 0x5c7, 0x0, 0x100, 0xff, 0x5, 0x2, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x7}, 0x2a00, 0x5, 0xe76, 0x4, 0x0, 0x5, 0x1}, r1, 0x6, r0, 0x4) write$cgroup_int(r2, &(0x7f00000001c0)=0x4, 0x12) 05:27:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000d000040050000a900000000000000000000004000000000010000000000000025000000fff0ffff040400000000b2000a00000006dd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000b400000000f1ffbfff00000000000000"]) 05:27:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000480)=""/7) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000240)=ANY=[@ANYBLOB]) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)={0x21, 0x3, 0x0, {0x6b8}}, 0x21) unshare(0x40000000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x25}, 0xffffffa6) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020") setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000200)=0x67, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x40000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000040)=0x800000000800, 0x8) creat(&(0x7f0000000080)='./file0\x00', 0x10) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000280)={[{0xd8df, 0x80, 0xc0, 0x7, 0xfffffffffffffffc, 0x8001, 0x80000001, 0x400, 0x3ff, 0xff}, {0x1, 0x5, 0x10001, 0x3, 0xfffffffffffffff9, 0x1000, 0x3, 0x97f, 0x400, 0x9, 0x8c8d, 0x7, 0x8}, {0x8001, 0x8, 0xd6000, 0x2, 0x100000001, 0x7, 0x100000001, 0x5, 0x8, 0x7c, 0x7, 0x7, 0x400}], 0x4}) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000240)=0x3ff, 0x4) r5 = socket$inet(0x10, 0x3, 0x4) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x15}, 0x1}}, 0x8, 0x200}, &(0x7f0000000400)=0x88) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) 05:27:40 executing program 3: syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x40000000000004) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9201, 0x0) 05:27:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', 0x0, 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fallocate(r0, 0x19, 0x9, 0x2a) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @sint}]}) [ 554.721853] IPVS: ftp: loaded support on port[0] = 21 05:27:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', 0x0, 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:40 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) preadv(r0, &(0x7f00000002c0), 0x0, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000fd00", {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'nr0\x00', {0x2, 0x0, @multicast1}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffff0000, 0x11) pkey_alloc(0x0, 0xffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000000680)={0x20000000000000f3, &(0x7f0000000600)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000380)={r3, 0x7}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='map_files\x00') ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x3ff, 0x3}) preadv(r4, &(0x7f0000000100), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') creat(&(0x7f0000000400)='\x00', 0xc0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x14000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x4000, 0x0) getsockname$netlink(r1, &(0x7f0000000140), &(0x7f0000000300)=0xc) openat$cgroup(0xffffffffffffff9c, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x8}}, 0x5, 0x2, 0x0, "196f168a2dd17c5af4127ca65c3bc2d69370e8421b0de0fe80c701cbf26b8fe9fa162ee6412aefe78fd716969064970435a41371015aeb8b311cfbc9277735404e8cae3efcb2fc24acf79b7e0df800b7"}, 0xd8) socket$pppoe(0x18, 0x1, 0x0) syncfs(0xffffffffffffffff) 05:27:40 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$setstatus(r2, 0x4, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x1, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x8000}, 0x2c) 05:27:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffe, 0x1}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='.\x00') write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1ebd) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) mmap(&(0x7f00000f2000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000240)={0x0, @ctrl={0x0, 0x0, @value64}}) iopl(0xa500) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f0000000080)=0x5, 0x4) fcntl$lock(r4, 0x7, &(0x7f0000002000)={0x1}) unshare(0x800) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80000, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x70, 0x5, 0x4, 0x5, 0x3, 0x0, 0x1, 0x10002, 0x9, 0x1000, 0x2, 0x100000000, 0x2, 0x0, 0xe6, 0x0, 0x3, 0x6, 0x0, 0xdb, 0x101, 0x8, 0xfffffffffffffff9, 0x0, 0x3, 0x4, 0x81, 0x44, 0x1, 0x200, 0x9, 0xff, 0x8001, 0xffffffffffff8000, 0xc19, 0x9, 0x7, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x20000, 0x800, 0x9, 0x9, 0xfff, 0x6, 0x80}, r2, 0xe, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) 05:27:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', 0x0, 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:40 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet6(0xa, 0x803, 0xc000000000000006) socket$inet6(0xa, 0x80007, 0x3) getsockopt$inet6_int(r1, 0x29, 0x10000000000024, &(0x7f0000534000), &(0x7f0000000040)=0x57cd) [ 555.492029] kauditd_printk_skb: 7 callbacks suppressed [ 555.492040] audit: type=1804 audit(1543901260.985:77): pid=20363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/92/file0/bus" dev="ramfs" ino=74179 res=1 [ 555.605263] IPVS: ftp: loaded support on port[0] = 21 05:27:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000480)=""/7) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000240)=ANY=[@ANYBLOB]) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)={0x21, 0x3, 0x0, {0x6b8}}, 0x21) unshare(0x40000000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x25}, 0xffffffa6) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020") setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000200)=0x67, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x40000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000040)=0x800000000800, 0x8) creat(&(0x7f0000000080)='./file0\x00', 0x10) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000280)={[{0xd8df, 0x80, 0xc0, 0x7, 0xfffffffffffffffc, 0x8001, 0x80000001, 0x400, 0x3ff, 0xff}, {0x1, 0x5, 0x10001, 0x3, 0xfffffffffffffff9, 0x1000, 0x3, 0x97f, 0x400, 0x9, 0x8c8d, 0x7, 0x8}, {0x8001, 0x8, 0xd6000, 0x2, 0x100000001, 0x7, 0x100000001, 0x5, 0x8, 0x7c, 0x7, 0x7, 0x400}], 0x4}) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000240)=0x3ff, 0x4) r5 = socket$inet(0x10, 0x3, 0x4) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x15}, 0x1}}, 0x8, 0x200}, &(0x7f0000000400)=0x88) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) 05:27:41 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) write$binfmt_elf64(r3, &(0x7f0000001800)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x81, 0x1, 0x1, 0x101, 0x3, 0x3, 0x5, 0x302, 0x40, 0x176, 0x97e4, 0x0, 0x38, 0x1, 0x3, 0x0, 0x80000000}, [{0x3, 0x2, 0x8, 0x1, 0x7, 0xf9e4, 0x0, 0x91}, {0x60000007, 0x1f, 0xa9a5, 0x5, 0x0, 0x1000000, 0x2, 0x271}], "62ae0ee6bec0d6f42b93a218f254eaf32b3f8f9aaabaca2c85ac22322bf039be57976fa5716c8f4c508ee534e43ce4c9973e71ab6614661294e7599dc97f38e949bb77222604873f60f7b0728dcf788e0ecd1c91cdda12c6102de2bfff4a6d6a2b683067acbf3a1906a8fdefa77aee1ed104ef45b27c99018e64edcd2fde014054423caa386183237f8b13d7c846293743c387abdd89262a57772a9017a1b6", [[], []]}, 0x34f) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 05:27:41 executing program 3: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='\x00', 0x10b885, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:27:41 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x9, 0x400000) r3 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0xffffffffffffffff, r1, 0x0, 0x7, &(0x7f0000000680)='bdev[#\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000840)=0x0) r10 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000), 0x4) r12 = gettid() r13 = getuid() r14 = getgid() r15 = gettid() r16 = geteuid() r17 = getgid() sendmsg$unix(r2, &(0x7f0000000a00)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)="34f267e475c4953f546c9b6b45e4938f8c72a4275a738aeacdc2f9fb977e76dbd48b21a3c96f345b546d292d5f6ecf59899692ae", 0x34}, {&(0x7f0000000200)="9635659beb09cbd93144f5423564d39388a38a8467c0eb4764045696d659398fa658e76f3d9dff3e6549038aadc11db7e006081d9d373bfd449067d777", 0x3d}, {&(0x7f00000002c0)="a1742853ad47a6b84ffd7ba143a768f3664f6f0233da56e3300b7d0bf6e9396c93b03d54f7a7e1fa467cba0b2175c400b377e5db747ccb6cd71148fdd1c5e411713c", 0x42}, {&(0x7f0000000240)="8a5e49139073be85fb010a5abdbffe6626bebf0332e2e7afb7589bd07ae8fc2e425cca3ae2c3283380160d073c2aba73ae792fe7116faaab163bbb", 0x3b}, {&(0x7f0000000340)="fbe3cc492762a5f0", 0x8}, {&(0x7f0000000380)="89ee104cb3f38c4ee8b2434d061f04b377cb608d9eead34d523bb1727b6b3a17284130124d6b00917e77657729e9ca7248083d483369", 0x36}], 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="100000000100000001000000", @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="180000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="180000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="140000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000002000000cf4a034e50bd9c33c369d188268418e7bbe4d6a083db61ea0d95b1dd28a8f9e8a493412772d7de1b5ebb5568398d3e50df075aa51a8fe9675284f4efee93a1d50bb046c4801a3fad003bf260247d2118c5d222da04c98a75080913887d5d0d48949e33b89b39693596cef56303ceafa91420beeca67f94e71c0b3c0ae925e81065782cd4d2fd3db6a2e74d4b5a228a56adefd92d2b362f926e6c27e97cb6e79ac4b397da90ad808dda8aa9ac8f53a7f48b093eca1b02e52316d5040ff503aec17cb243a20375ef9618daaf488095f1ed4c0a64f950b0e47c008a1c2c461387", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="180000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="300000000100000063c2cbe5d15d8adb5c83c919942201000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0], 0xe4, 0x20000000}, 0x1) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 555.840902] audit: type=1804 audit(1543901261.335:78): pid=20383 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/93/file0/bus" dev="ramfs" ino=74236 res=1 05:27:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x100000000060, &(0x7f00000001c0)="7b88764a52103704fafcc54327f74f14ac51b5bba0d1c66a56e008a931b50c74e2db372b3883007e7e92a43ba2a78e70ffdb844f3699e040d27469ec9d0f6e9c1ed3281cb86c53ad", 0x48) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2e4, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x3, @local, 0x4}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x9f, 0x76, 0xd5, 0xb9, 0x5d7}, &(0x7f0000000400)=0x14) sendmmsg$inet_sctp(r1, &(0x7f0000001b40)=[{&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x2, @empty, 0x1f}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="2febd684da0ff436e0d8fce26a7ecd4c08f175f5ddbb39d3df6734e762aaafc9d1cedec504d5ff1a2b12c6d8b1df9faf0ea518289bf5bd2247e9956ad33c19a4be251276613184d5883972f71b62e4b38ab422", 0x53}, {&(0x7f0000000100)="78240cda76481c504049", 0xa}, {&(0x7f0000000240)="6a2f439b2b1e0bce4548922d2036b06ed5050d8b31e62587e5863d8cac4a852f6cc37349008e6070d86649e36d90c9ead9d7e252e48b8abff193c6b9884f4787b8c8b8187985e6a212e057775345a912532358d89253b5cc548c94b42a2667aa945fb2c4b168f159e77a17496f2082f304260a4171b0660da7a7f7fa57065b9f120a75c59a966bcf2be5bfc2b03868132fb71c860574beea8eb7bea42e6143", 0x9f}], 0x3, &(0x7f0000000440)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x2, 0x4, 0x24d, 0x20, 0x9, 0x3ff, 0x100, r2}}, @prinfo={0x14, 0x84, 0x5, {0x20, 0x3}}, @dstaddrv4={0x10, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x16}}, @sndrcv={0x2c, 0x84, 0x1, {0x0, 0xffffffff, 0x2, 0x0, 0xffffffff, 0x1, 0x8, 0x2, r3}}, @dstaddrv4={0x10, 0x84, 0x7, @remote}], 0x8c, 0x4000800}, {&(0x7f0000000500)=@in6={0xa, 0x4e20, 0x3c14537d, @ipv4={[], [], @multicast1}, 0x1}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000000540)="94b9c527f7d790b6", 0x8}, {&(0x7f0000000580)="6edeb72683f61b0132d6a726fa3cf815bac53f55f280677dea188c57d64de4e664739d809f06196cc945707c53be6853242bc2fc8be5c3594574a0f5a7f9d750fc288a865a9f647ca906161abd", 0x4d}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="a01f21b9d19e56841f318867beed01c94a4d451b2130aacfa946450bf2c2a6b169a537e51d988d866a0f18ad08dc5074886452f363f1dbb8f8f22eb42265e139878d1e27100412c825be53eecc279b7c48c9982b6c82da8dc52521a5d160d5c9a16a837c9e7ab9fc95554ddf812fd9e4d89fd5b4411f1fa45f1233774a93ba97360b9b0de7f166439584fda6ffee0709e384af32bc84f81471d8359233c2858b6182b358822598b9c222074845699247de89c0e31c29e8", 0xb7}, {&(0x7f00000016c0)="10a3167c45850ceff5d9ed0cffd77003d16f7c06b1f2f60679535cba02459b8b9d66f88f9ad4840e6db4b2a398c592a14d2d8098d4ebdd20dfb146ee547345f1be58e49c0623d452063bc3449b397e947e82be4ec7e46075b8b191d5aaa5f983dca271f922115ba14c79709e56168d9c0a884db5cdd5d4", 0x77}, {&(0x7f0000001740)="de160249a62d6039aa53ff775e62aa34e60dc93f2855010500fae5d05bc393fae4ba645447361c34c161ff1fd2907a94391d56adfa00393094d4450a620d5a08e8264e6a2bee91c7a14128258ac4f58e06bdfd7046cf9737e334e8905a88e8b839cbaa2c27ff8ab112d3c1f9d9a17a639c56a9603266397b79ec3f36323bcaa2f133352006070d9eb8c4", 0x8a}, {&(0x7f0000001800)="997522e40ca977de5b74796db87714cd1ce17f1c7ff8732ee8bff042ea3a40296850ce1137440e313f9bbaa697ac642e2fae81f26d4db0017fc17ca8c7eb707be0ea1bdbc38ceea32f96458d62ca8776a1c86465ee9622e6590afecc18ed81fd3fa6ece8f12c352a5a8fc18bd852d5e34acd1db047058d4dd70873dbf5bdf416631426ce5da1cd1da38c6fdea17f19cdc7dc59b8de767cd17fe2a75761b285ef7c7d65993a3e8385cf9eda22c22b4a6d18ac9cc4e4ecfff33f0c2bf23b85afaf9af377a175acb97a439c99a4f1b5b089dcb8587fe276f6627584ba9cc56d6f1d78aff8bc4b94cf", 0xe7}, {&(0x7f0000001900)="57d9ae4f09c272cce7e577e36f86530c0bdb4fb5e1a1b5b8681caa30cb7553e78ecd91a87b37bc4eb64104b1088a12d3be0c2750ad20682ac87182c38df82b8fbedf4af41ec4d89b0d52094bb5e667d2ce7c2b230de7e18731a78b270fd208c706e63a0fc9fa3bc40744c4f08665b3d3acc2d3e8d7776c7bb67165c50726b8c887057e0ae488779302a7eb37c7c0c7c1875126add6e450fe80c0490d982e9a04880bb0e19b15f6155b1523d1e7bfdbfc710be5c4546cd3039f9e5417f4114f01a1f51f4513faa82e0e3a44df380762710fd444d387ebba921c3a1afa7a9cfec859e1c01159074125d18ea4bf53e6", 0xee}, {&(0x7f0000001a00)="eda368141334119e6649219f4b637b84b48195c933b07393b321a0db0606afafb8d9cd229a3d0605043c24dd70bf84a1df215917effbbea08e6b155cba071a88cff5b6323f2c", 0x46}], 0x9, &(0x7f0000001b00)=[@prinfo={0x14, 0x84, 0x5, {0x0, 0x9}}], 0x14, 0x40000}], 0x2, 0x1) [ 556.021056] IPVS: ftp: loaded support on port[0] = 21 05:27:41 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e66739e", 0x0, &(0x7f000000a000)) 05:27:41 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(0x0, 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000002040)=[{0x10, 0x0, 0x2, "c6"}], 0x10}}], 0x1, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4004ae52, &(0x7f0000000000)=0x8) 05:27:41 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x200000) r1 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x8000101842, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8815, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r3, 0x0) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) vmsplice(r1, 0x0, 0x0, 0x1) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0), 0x4) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000013c0)=""/21, 0xfffffea1) ioctl$LOOP_CLR_FD(r2, 0x4c01) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="c3e6b95b645c4ca6463ca7f28fb939a7ec1769d8f4f0e5a80b7140225b9811f48aac8a1d62e3392d6f32af200828130580d0946b33a025ccfadb5488276c0f822cf9bca750f7215d7b0012f145a439ebf969075b81671ffd8bdc"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0/file0\x00', 0xe, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0xbfffe, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000540)="e4124b0dd7aad573d7f2118653b6d5abe827ec6b90b4fdc3879ee901f8f7105897c4af71334d31ebf1a61bc0b8d526b8ac2773da0cb6617bb334777d1398eda9c3d885878ca2297172d7a86a43fc53fe382fb11d3c3cbe00", 0x0}}, 0x0) gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000003c0)={0x1, 0x0, 0x100000000000002, 0x3, 0x48}) 05:27:41 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(0x0, 0x0, 0x0) 05:27:41 executing program 5: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f0000000040)=0x2, 0x4) prctl$PR_SVE_SET_VL(0x32, 0x3a27d) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 05:27:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d7") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x4e5, 0x80) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x220c01, 0x0) syz_open_dev$vcsa(&(0x7f0000000800)='/dev/vcsa#\x00', 0x4, 0x105003) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x8fac45cbccbc58ad, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r2, 0xffffffffffffffce) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x0, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000002f40)="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", 0x224, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000001c0)=""/60) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f00000004c0)=""/118, 0xd7) sendto$unix(r1, &(0x7f00000003c0)="65f9d2499ad6e0cf415ffeee762475c1254f50b442eb864345a338785912a65285e453e3cf2223eb657d9575d67ec1ec75d7135e17997a0913ff317793d9ae826ec1bf99703d10ab9316e5a0e8f3f2e951ecd96e26ff9974dffe58862d5b122f11f1933e8018cb3dc94ff153f606755f02b19b224d0a5549efafd4a423457455bee278a86444592c590f8278d83945756a3e604ea1aa3cd06844a72a6aa31aff86c8b1f335bad1698685f79356eef13e80cbd9320c00a495201b6972f1ba0d0e377a3197271a39c09b670ef5109b9faa99c0c11fc9487666625c", 0xda, 0x40804, 0x0, 0x0) unshare(0x800) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) 05:27:42 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000540)=""/206) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x20800a2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000440)="ea5086ac6cae30c45de005386f55c2e3", 0x10) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000740)=""/183, 0xb7}, &(0x7f0000000500)}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x1ff) io_setup(0x80000000, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702e6e65742f73797a312775ca1e56b82a6b2c9610345bf0841f9c0223ea8317e1c2fd7ad819a4e039", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000380)='./file0/file0\x00') ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000400), &(0x7f0000000480)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x0, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81bd, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x8001, 0x0, 0x7fff, 0x80, 0x82, 0x7, 0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026, 0x5, 0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) socket$inet6(0xa, 0x80000, 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x40000, 0x0) setsockopt$sock_void(r2, 0x1, 0x27, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0), 0x4) 05:27:42 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667391", 0x0, &(0x7f000000a000)) 05:27:42 executing program 0 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 556.591988] FAULT_INJECTION: forcing a failure. [ 556.591988] name failslab, interval 1, probability 0, space 0, times 0 05:27:42 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x140, 0x8302) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000180)) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="cc36f740523e8f5b3d0780d72ce14ffc3d02bbcf1ab4112e1f1f6c791ccac1abc5432158", 0x24) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) [ 556.687387] CPU: 1 PID: 20438 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 556.694789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.704161] Call Trace: [ 556.706770] dump_stack+0x244/0x39d [ 556.710426] ? dump_stack_print_info.cold.1+0x20/0x20 [ 556.715657] ? perf_trace_lock+0x4a7/0x7a0 [ 556.719918] should_fail.cold.4+0xa/0x17 [ 556.723990] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 556.729142] ? __f_unlock_pos+0x19/0x20 [ 556.733194] ? find_held_lock+0x36/0x1c0 [ 556.737292] ? kasan_check_write+0x14/0x20 [ 556.741528] ? perf_trace_sched_process_exec+0x860/0x860 [ 556.746998] ? wait_for_completion+0x8a0/0x8a0 [ 556.751671] __should_failslab+0x124/0x180 [ 556.755910] should_failslab+0x9/0x14 [ 556.759727] kmem_cache_alloc+0x2be/0x730 [ 556.763908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 556.769456] ? check_preemption_disabled+0x48/0x280 [ 556.774488] getname_flags+0xd0/0x590 [ 556.778301] getname+0x19/0x20 [ 556.781530] do_sys_open+0x383/0x700 [ 556.785265] ? filp_open+0x80/0x80 [ 556.788840] ? trace_hardirqs_off_caller+0x310/0x310 [ 556.793944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 556.799509] ? __do_page_fault+0x491/0xe60 [ 556.803749] __ia32_compat_sys_open+0x79/0xb0 [ 556.808256] do_fast_syscall_32+0x34d/0xfb2 [ 556.812596] ? do_int80_syscall_32+0x890/0x890 [ 556.817241] ? entry_SYSENTER_compat+0x68/0x7f [ 556.821854] ? trace_hardirqs_off_caller+0xbb/0x310 [ 556.826896] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.831738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.836595] ? trace_hardirqs_on_caller+0x310/0x310 [ 556.841651] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 556.846669] ? prepare_exit_to_usermode+0x291/0x3b0 [ 556.851712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.856577] entry_SYSENTER_compat+0x70/0x7f [ 556.860988] RIP: 0023:0xf7f01a29 [ 556.864407] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 05:27:42 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673f6", 0x0, &(0x7f000000a000)) [ 556.883312] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 556.891042] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 556.898331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.905596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 556.912860] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 556.920130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:27:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x10000001, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = gettid() init_module(&(0x7f0000000080)='selinux{#\x00', 0xa, &(0x7f00000000c0)='/dev/input/event#\x00') read(r1, &(0x7f0000000380)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, 0x0, 0xfffffffffffffffd, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140)=0x80000001, 0x4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001380)={0x1, 0x1, &(0x7f0000000200)=""/70, &(0x7f0000000280)=""/87, &(0x7f0000000300)=""/83}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) tkill(r2, 0x7) 05:27:42 executing program 0 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 557.101614] print_req_error: I/O error, dev loop0, sector 0 [ 557.107742] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 557.115980] print_req_error: I/O error, dev loop0, sector 8 [ 557.122113] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 557.129857] print_req_error: I/O error, dev loop0, sector 16 [ 557.135696] Buffer I/O error on dev loop0, logical block 2, lost async page write 05:27:42 executing program 5: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000fc0)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000d40)}]) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x0) setfsuid(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000240), 0xffffffffffffff6c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000001a80)=""/201) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001640)=ANY=[@ANYBLOB="ad2b72937a6e4ed6bc36e0f57a366781225fb7e4789ff1f3885ee4725783c7de4f635cb3c0d4cfcbfff0832d7b33d23a71cd7b0776a4fc81a53270354f2ce63c8d7cc1ef3bf10ddbc10b2eccd6bb4bab043fa4a8ca262a30672732ada04856d9162d45602e1f53e074f23fe028c9307e23ba00b0e0804f2d618da6062e0809253b3e7023978138c051375d83e79970ed8aede358d079e5cbed8a5b57f39bb3331a8c43cc19ed57ed821f6d3424a814523d39b867394667b3dbfdd21e420056b0499d840c5df735fd8a99a63b0fc418384c3f9525e1fed1917eb26eadc058b513bfe5ee8c28717b4264837ed899168f97a7b279b8"], &(0x7f0000000000)=0x1) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x3) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000180)=""/38) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000), 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4000000001, 0xb7, &(0x7f0000000440)=""/183}, 0x48) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x6, 0x4) r4 = socket$kcm(0x29, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r5 = getpgrp(0x0) kcmp(0x0, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={r0, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x2080, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x1}, 0x7, 0xacdd}) [ 557.147341] print_req_error: I/O error, dev loop0, sector 24 [ 557.153172] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 557.161551] print_req_error: I/O error, dev loop0, sector 32 [ 557.167469] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 557.175146] print_req_error: I/O error, dev loop0, sector 40 [ 557.181207] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 557.188996] print_req_error: I/O error, dev loop0, sector 48 [ 557.194830] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 557.203698] print_req_error: I/O error, dev loop0, sector 56 [ 557.203834] print_req_error: I/O error, dev loop0, sector 64 [ 557.209698] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 557.215482] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 557.223274] print_req_error: I/O error, dev loop0, sector 72 [ 557.231005] Buffer I/O error on dev loop0, logical block 10, lost async page write 05:27:42 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673f5", 0x0, &(0x7f000000a000)) 05:27:42 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x200000) r1 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x8000101842, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8815, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r3, 0x0) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) vmsplice(r1, 0x0, 0x0, 0x1) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0), 0x4) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000013c0)=""/21, 0xfffffea1) ioctl$LOOP_CLR_FD(r2, 0x4c01) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="c3e6b95b645c4ca6463ca7f28fb939a7ec1769d8f4f0e5a80b7140225b9811f48aac8a1d62e3392d6f32af200828130580d0946b33a025ccfadb5488276c0f822cf9bca750f7215d7b0012f145a439ebf969075b81671ffd8bdc"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0/file0\x00', 0xe, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0xbfffe, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000540)="e4124b0dd7aad573d7f2118653b6d5abe827ec6b90b4fdc3879ee901f8f7105897c4af71334d31ebf1a61bc0b8d526b8ac2773da0cb6617bb334777d1398eda9c3d885878ca2297172d7a86a43fc53fe382fb11d3c3cbe00", 0x0}}, 0x0) gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000003c0)={0x1, 0x0, 0x100000000000002, 0x3, 0x48}) 05:27:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x80) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x102000007fa) 05:27:42 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000540)=""/206) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x20800a2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000440)="ea5086ac6cae30c45de005386f55c2e3", 0x10) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000740)=""/183, 0xb7}, &(0x7f0000000500)}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x1ff) io_setup(0x80000000, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702e6e65742f73797a312775ca1e56b82a6b2c9610345bf0841f9c0223ea8317e1c2fd7ad819a4e039", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000380)='./file0/file0\x00') ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000400), &(0x7f0000000480)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x0, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81bd, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x8001, 0x0, 0x7fff, 0x80, 0x82, 0x7, 0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026, 0x5, 0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) socket$inet6(0xa, 0x80000, 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x40000, 0x0) setsockopt$sock_void(r2, 0x1, 0x27, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0), 0x4) [ 557.484416] FAULT_INJECTION: forcing a failure. [ 557.484416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.496287] CPU: 0 PID: 20482 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 557.496300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.496308] Call Trace: [ 557.496336] dump_stack+0x244/0x39d [ 557.496364] ? dump_stack_print_info.cold.1+0x20/0x20 [ 557.496388] ? lock_is_held_type+0x210/0x210 [ 557.496422] should_fail.cold.4+0xa/0x17 [ 557.496449] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 557.496467] ? perf_trace_lock+0x14d/0x7a0 [ 557.496507] ? mark_held_locks+0x130/0x130 [ 557.496535] ? debug_smp_processor_id+0x1c/0x20 [ 557.496553] ? perf_trace_lock+0x14d/0x7a0 [ 557.496569] ? _kstrtoull+0x188/0x250 [ 557.496589] ? _parse_integer+0x180/0x180 [ 557.496612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 557.496635] ? check_preemption_disabled+0x48/0x280 [ 557.496652] ? perf_trace_sched_process_exec+0x860/0x860 [ 557.496678] ? debug_smp_processor_id+0x1c/0x20 [ 557.496697] ? perf_trace_lock+0x14d/0x7a0 [ 557.496723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 557.496742] ? should_fail+0x22d/0xd01 [ 557.496762] ? lock_is_held_type+0x210/0x210 [ 557.496782] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 557.496802] ? perf_trace_lock+0x14d/0x7a0 [ 557.496838] __alloc_pages_nodemask+0x366/0xea0 [ 557.496856] ? find_held_lock+0x36/0x1c0 [ 557.496883] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 557.496906] ? __f_unlock_pos+0x19/0x20 [ 557.496931] ? find_held_lock+0x36/0x1c0 [ 557.496989] ? trace_hardirqs_off+0xb8/0x310 [ 557.497025] cache_grow_begin+0xa5/0x8c0 [ 557.497046] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 557.497069] ? check_preemption_disabled+0x48/0x280 [ 557.520135] kmem_cache_alloc+0x66b/0x730 [ 557.529722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 557.529741] ? check_preemption_disabled+0x48/0x280 [ 557.529768] getname_flags+0xd0/0x590 [ 557.529790] getname+0x19/0x20 [ 557.529806] do_sys_open+0x383/0x700 [ 557.529826] ? filp_open+0x80/0x80 05:27:43 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673c2", 0x0, &(0x7f000000a000)) [ 557.538981] ? trace_hardirqs_off_caller+0x310/0x310 [ 557.538998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 557.539025] ? __do_page_fault+0x491/0xe60 [ 557.539063] __ia32_compat_sys_open+0x79/0xb0 [ 557.539099] do_fast_syscall_32+0x34d/0xfb2 [ 557.547568] ? do_int80_syscall_32+0x890/0x890 [ 557.547603] ? entry_SYSENTER_compat+0x68/0x7f [ 557.547620] ? trace_hardirqs_off_caller+0xbb/0x310 [ 557.547636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 557.547654] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 557.556530] ? trace_hardirqs_on_caller+0x310/0x310 [ 557.556549] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 557.556569] ? prepare_exit_to_usermode+0x291/0x3b0 [ 557.744781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 557.750183] entry_SYSENTER_compat+0x70/0x7f [ 557.750203] RIP: 0023:0xf7f01a29 [ 557.757983] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 557.776903] RSP: 002b:00000000f5edc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 557.784617] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 557.791887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.799152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.806414] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 557.813679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:27:43 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000540)=""/206) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x20800a2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000440)="ea5086ac6cae30c45de005386f55c2e3", 0x10) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000740)=""/183, 0xb7}, &(0x7f0000000500)}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x1ff) io_setup(0x80000000, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702e6e65742f73797a312775ca1e56b82a6b2c9610345bf0841f9c0223ea8317e1c2fd7ad819a4e039", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000380)='./file0/file0\x00') ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000400), &(0x7f0000000480)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x0, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81bd, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x8001, 0x0, 0x7fff, 0x80, 0x82, 0x7, 0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026, 0x5, 0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) socket$inet6(0xa, 0x80000, 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x40000, 0x0) setsockopt$sock_void(r2, 0x1, 0x27, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0), 0x4) [ 557.844935] audit: type=1804 audit(1543901263.335:79): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/97/file0/bus" dev="ramfs" ino=74423 res=1 05:27:43 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:43 executing program 0 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:43 executing program 5: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000fc0)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000d40)}]) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x0) setfsuid(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000240), 0xffffffffffffff6c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000001a80)=""/201) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001640)=ANY=[@ANYBLOB="ad2b72937a6e4ed6bc36e0f57a366781225fb7e4789ff1f3885ee4725783c7de4f635cb3c0d4cfcbfff0832d7b33d23a71cd7b0776a4fc81a53270354f2ce63c8d7cc1ef3bf10ddbc10b2eccd6bb4bab043fa4a8ca262a30672732ada04856d9162d45602e1f53e074f23fe028c9307e23ba00b0e0804f2d618da6062e0809253b3e7023978138c051375d83e79970ed8aede358d079e5cbed8a5b57f39bb3331a8c43cc19ed57ed821f6d3424a814523d39b867394667b3dbfdd21e420056b0499d840c5df735fd8a99a63b0fc418384c3f9525e1fed1917eb26eadc058b513bfe5ee8c28717b4264837ed899168f97a7b279b8"], &(0x7f0000000000)=0x1) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x3) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000180)=""/38) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000), 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4000000001, 0xb7, &(0x7f0000000440)=""/183}, 0x48) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x6, 0x4) r4 = socket$kcm(0x29, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r5 = getpgrp(0x0) kcmp(0x0, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={r0, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x2080, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x1}, 0x7, 0xacdd}) [ 558.071049] FAULT_INJECTION: forcing a failure. [ 558.071049] name failslab, interval 1, probability 0, space 0, times 0 [ 558.091926] CPU: 0 PID: 20519 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 558.099324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.099344] Call Trace: [ 558.099375] dump_stack+0x244/0x39d [ 558.099413] ? dump_stack_print_info.cold.1+0x20/0x20 [ 558.099444] ? perf_trace_lock+0x4a7/0x7a0 [ 558.124469] should_fail.cold.4+0xa/0x17 [ 558.128617] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 558.133809] ? perf_tp_event+0x92f/0xc20 [ 558.133856] ? perf_trace_run_bpf_submit+0x267/0x330 [ 558.143020] ? perf_trace_run_bpf_submit+0x267/0x330 [ 558.148147] ? find_held_lock+0x36/0x1c0 [ 558.148206] ? perf_trace_lock+0x4a7/0x7a0 [ 558.148225] ? perf_trace_sched_process_exec+0x860/0x860 [ 558.148265] __should_failslab+0x124/0x180 [ 558.161999] should_failslab+0x9/0x14 [ 558.162029] kmem_cache_alloc+0x2be/0x730 [ 558.162047] ? zap_class+0x640/0x640 [ 558.162085] __alloc_file+0xa8/0x470 [ 558.174261] ? file_free_rcu+0xd0/0xd0 [ 558.174294] ? perf_tp_event+0xc20/0xc20 [ 558.174317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 558.181826] ? check_preemption_disabled+0x48/0x280 [ 558.181851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 558.181872] ? check_preemption_disabled+0x48/0x280 [ 558.181897] ? memset+0x31/0x40 [ 558.190055] alloc_empty_file+0x72/0x170 [ 558.190086] path_openat+0x170/0x5150 [ 558.190107] ? lock_is_held_type+0x210/0x210 [ 558.190124] ? unwind_dump+0x190/0x190 [ 558.190163] ? zap_class+0x640/0x640 [ 558.190194] ? path_lookupat.isra.43+0xc00/0xc00 [ 558.190213] ? unwind_get_return_address+0x61/0xa0 [ 558.200761] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 558.200780] ? expand_files.part.8+0x571/0x9a0 [ 558.200811] ? find_held_lock+0x36/0x1c0 [ 558.200845] ? __alloc_fd+0x347/0x6e0 [ 558.200867] ? lock_downgrade+0x900/0x900 [ 558.200884] ? getname+0x19/0x20 [ 558.200913] ? kasan_check_read+0x11/0x20 [ 558.211444] ? do_raw_spin_unlock+0xa7/0x330 [ 558.211464] ? do_raw_spin_trylock+0x270/0x270 [ 558.211484] ? __lock_is_held+0xb5/0x140 [ 558.211499] ? __check_object_size+0xb1/0x782 [ 558.211536] ? _raw_spin_unlock+0x2c/0x50 [ 558.218863] ? __alloc_fd+0x347/0x6e0 [ 558.218909] do_filp_open+0x255/0x380 [ 558.218930] ? may_open_dev+0x100/0x100 [ 558.218974] ? get_unused_fd_flags+0x122/0x1a0 [ 558.227236] ? __alloc_fd+0x6e0/0x6e0 [ 558.227277] do_sys_open+0x568/0x700 05:27:43 executing program 0 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 558.227344] ? filp_open+0x80/0x80 [ 558.227385] ? trace_hardirqs_off_caller+0x310/0x310 [ 558.227402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 558.227425] ? __do_page_fault+0x491/0xe60 [ 558.235091] __ia32_compat_sys_open+0x79/0xb0 [ 558.235119] do_fast_syscall_32+0x34d/0xfb2 [ 558.235147] ? do_int80_syscall_32+0x890/0x890 [ 558.235169] ? entry_SYSENTER_compat+0x68/0x7f [ 558.244844] ? trace_hardirqs_off_caller+0xbb/0x310 [ 558.244865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.244882] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:27:43 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000540)=""/206) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x20800a2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000440)="ea5086ac6cae30c45de005386f55c2e3", 0x10) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000740)=""/183, 0xb7}, &(0x7f0000000500)}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x1ff) io_setup(0x80000000, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702e6e65742f73797a312775ca1e56b82a6b2c9610345bf0841f9c0223ea8317e1c2fd7ad819a4e039", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000380)='./file0/file0\x00') ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000400), &(0x7f0000000480)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x0, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81bd, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x8001, 0x0, 0x7fff, 0x80, 0x82, 0x7, 0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026, 0x5, 0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) socket$inet6(0xa, 0x80000, 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x40000, 0x0) setsockopt$sock_void(r2, 0x1, 0x27, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0), 0x4) [ 558.244902] ? trace_hardirqs_on_caller+0x310/0x310 [ 558.244923] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 558.254530] ? prepare_exit_to_usermode+0x291/0x3b0 [ 558.254563] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.254613] entry_SYSENTER_compat+0x70/0x7f [ 558.254632] RIP: 0023:0xf7f01a29 [ 558.270005] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 05:27:43 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000bf0000/0x3000)=nil, 0x3000}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x40) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000200)={0x4, 0x0, [{0xd, 0xff, 0x1, 0x5, 0x9}, {0x1, 0x9, 0xfffffffffffffffd, 0x1, 0x7}, {0xc000000d, 0x0, 0x2, 0xfffffffffffffff8}, {0x7, 0x5be, 0x2, 0x40, 0x9ae}]}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) sigaltstack(&(0x7f0000be6000/0x3000)=nil, &(0x7f0000000000)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x4400, 0x0) mremap(&(0x7f0000cc8000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000a71000/0x3000)=nil) r5 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x8, 0x100000000, 0xffff, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r6, 0x7, 0x1, [0x7]}, 0xa) keyctl$session_to_parent(0x12) writev(r5, &(0x7f0000000700), 0x1000000000000110) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f00000002c0)={'veth0_to_team\x00', {0x2, 0x4e23, @empty}}) [ 558.270027] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 558.270060] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 558.270087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.270128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.270143] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.278704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:27:44 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f00000002c0)={0x20000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x2080) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x200000000000, @broadcast}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x2}) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) keyctl$session_to_parent(0x12) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000003c0)={0x5, 0x40, 0x3, 0xfffffffffffffffa}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0}, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="0a21f30038075c77e55d0083"], 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000080)=""/131, &(0x7f0000000140)=0x10) sendfile(0xffffffffffffffff, r1, &(0x7f0000000380), 0x1) sendfile(r3, r5, &(0x7f0000000080), 0xffffffffffffff9e) stat(&(0x7f0000000000)='./file0\x00', 0x0) keyctl$invalidate(0x15, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x80, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$cgroup_subtree(r1, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x599, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, &(0x7f00000000c0)) prctl$PR_CAPBSET_DROP(0x18, 0x1b) [ 558.613625] FAULT_INJECTION: forcing a failure. [ 558.613625] name failslab, interval 1, probability 0, space 0, times 0 [ 558.674367] CPU: 1 PID: 20541 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 558.681754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.691149] Call Trace: [ 558.693767] dump_stack+0x244/0x39d [ 558.697439] ? dump_stack_print_info.cold.1+0x20/0x20 [ 558.702663] ? debug_smp_processor_id+0x1c/0x20 [ 558.702687] ? perf_trace_lock+0x14d/0x7a0 [ 558.711615] should_fail.cold.4+0xa/0x17 [ 558.711638] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 558.711666] ? is_bpf_text_address+0xd3/0x170 [ 558.711686] ? kernel_text_address+0x79/0xf0 [ 558.711704] ? __kernel_text_address+0xd/0x40 [ 558.711720] ? unwind_get_return_address+0x61/0xa0 [ 558.711741] ? __save_stack_trace+0x8d/0xf0 [ 558.720907] ? find_held_lock+0x36/0x1c0 [ 558.720951] ? do_fast_syscall_32+0x34d/0xfb2 [ 558.720970] ? perf_trace_sched_process_exec+0x860/0x860 [ 558.721002] __should_failslab+0x124/0x180 [ 558.721035] should_failslab+0x9/0x14 [ 558.721054] kmem_cache_alloc_trace+0x2d7/0x750 [ 558.721074] ? __might_sleep+0x95/0x190 [ 558.721098] apparmor_file_alloc_security+0x17b/0xac0 [ 558.729978] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 558.730002] ? apparmor_path_rename+0xcd0/0xcd0 [ 558.730040] ? rcu_read_lock_sched_held+0x14f/0x180 [ 558.730057] ? kmem_cache_alloc+0x33a/0x730 [ 558.730072] ? zap_class+0x640/0x640 [ 558.730095] security_file_alloc+0x4c/0xa0 [ 558.730121] __alloc_file+0x12a/0x470 [ 558.739537] ? file_free_rcu+0xd0/0xd0 [ 558.739558] ? find_held_lock+0x36/0x1c0 [ 558.739590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 558.739610] ? check_preemption_disabled+0x48/0x280 [ 558.739637] alloc_empty_file+0x72/0x170 [ 558.739661] path_openat+0x170/0x5150 [ 558.739679] ? lock_is_held_type+0x210/0x210 [ 558.739693] ? unwind_dump+0x190/0x190 [ 558.739719] ? zap_class+0x640/0x640 [ 558.748085] ? path_lookupat.isra.43+0xc00/0xc00 [ 558.748100] ? unwind_get_return_address+0x61/0xa0 [ 558.748118] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 558.748134] ? expand_files.part.8+0x571/0x9a0 [ 558.748158] ? find_held_lock+0x36/0x1c0 [ 558.748184] ? __alloc_fd+0x347/0x6e0 [ 558.748202] ? lock_downgrade+0x900/0x900 [ 558.748218] ? getname+0x19/0x20 [ 558.748241] ? kasan_check_read+0x11/0x20 [ 558.748260] ? do_raw_spin_unlock+0xa7/0x330 [ 558.758198] ? do_raw_spin_trylock+0x270/0x270 [ 558.758217] ? __lock_is_held+0xb5/0x140 [ 558.758231] ? __check_object_size+0xb1/0x782 [ 558.758261] ? _raw_spin_unlock+0x2c/0x50 [ 558.758278] ? __alloc_fd+0x347/0x6e0 [ 558.758309] do_filp_open+0x255/0x380 [ 558.758327] ? may_open_dev+0x100/0x100 [ 558.758361] ? get_unused_fd_flags+0x122/0x1a0 [ 558.758383] ? __alloc_fd+0x6e0/0x6e0 [ 558.766464] do_sys_open+0x568/0x700 [ 558.766487] ? filp_open+0x80/0x80 [ 558.766509] ? trace_hardirqs_off_caller+0x310/0x310 [ 558.766541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 558.766557] ? __do_page_fault+0x491/0xe60 [ 558.766579] __ia32_compat_sys_open+0x79/0xb0 [ 558.766599] do_fast_syscall_32+0x34d/0xfb2 [ 558.766619] ? do_int80_syscall_32+0x890/0x890 [ 558.775261] ? entry_SYSENTER_compat+0x68/0x7f 05:27:44 executing program 0 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:44 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) [ 558.775280] ? trace_hardirqs_off_caller+0xbb/0x310 [ 558.775297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.775313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.775331] ? trace_hardirqs_on_caller+0x310/0x310 [ 558.775350] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 558.775370] ? prepare_exit_to_usermode+0x291/0x3b0 [ 558.775393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.775415] entry_SYSENTER_compat+0x70/0x7f [ 558.786133] RIP: 0023:0xf7f01a29 05:27:44 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000540)=""/206) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x20800a2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000440)="ea5086ac6cae30c45de005386f55c2e3", 0x10) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000740)=""/183, 0xb7}, &(0x7f0000000500)}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x1ff) io_setup(0x80000000, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702e6e65742f73797a312775ca1e56b82a6b2c9610345bf0841f9c0223ea8317e1c2fd7ad819a4e039", 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000380)='./file0/file0\x00') ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000400), &(0x7f0000000480)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x0, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81bd, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x8001, 0x0, 0x7fff, 0x80, 0x82, 0x7, 0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026, 0x5, 0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) socket$inet6(0xa, 0x80000, 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x40000, 0x0) setsockopt$sock_void(r2, 0x1, 0x27, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0), 0x4) [ 558.786152] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 558.786162] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 558.786178] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 558.786188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.786198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.786208] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.786217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.861127] syz-executor3 (20537) used greatest stack depth: 7936 bytes left 05:27:44 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='cpu\t\t.?\x00\x00') r1 = dup2(r0, r0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0xa, 0x1, 0x1}, 0xa) [ 559.149651] FAULT_INJECTION: forcing a failure. [ 559.149651] name failslab, interval 1, probability 0, space 0, times 0 05:27:44 executing program 5: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000fc0)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000d40)}]) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x0) setfsuid(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000240), 0xffffffffffffff6c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000001a80)=""/201) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001640)=ANY=[@ANYBLOB="ad2b72937a6e4ed6bc36e0f57a366781225fb7e4789ff1f3885ee4725783c7de4f635cb3c0d4cfcbfff0832d7b33d23a71cd7b0776a4fc81a53270354f2ce63c8d7cc1ef3bf10ddbc10b2eccd6bb4bab043fa4a8ca262a30672732ada04856d9162d45602e1f53e074f23fe028c9307e23ba00b0e0804f2d618da6062e0809253b3e7023978138c051375d83e79970ed8aede358d079e5cbed8a5b57f39bb3331a8c43cc19ed57ed821f6d3424a814523d39b867394667b3dbfdd21e420056b0499d840c5df735fd8a99a63b0fc418384c3f9525e1fed1917eb26eadc058b513bfe5ee8c28717b4264837ed899168f97a7b279b8"], &(0x7f0000000000)=0x1) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x3) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000180)=""/38) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000), 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4000000001, 0xb7, &(0x7f0000000440)=""/183}, 0x48) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x6, 0x4) r4 = socket$kcm(0x29, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r5 = getpgrp(0x0) kcmp(0x0, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={r0, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x2080, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x1}, 0x7, 0xacdd}) [ 559.218431] CPU: 1 PID: 20560 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 559.225831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.235179] Call Trace: [ 559.235214] dump_stack+0x244/0x39d [ 559.235242] ? dump_stack_print_info.cold.1+0x20/0x20 [ 559.235268] ? perf_trace_lock+0x4a7/0x7a0 [ 559.235299] should_fail.cold.4+0xa/0x17 [ 559.235324] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 559.235368] ? lock_is_held_type+0x210/0x210 [ 559.235386] ? kasan_slab_alloc+0x12/0x20 [ 559.235413] ? integrity_inode_get+0x56/0x230 [ 559.246808] ? ima_file_check+0xe5/0x130 [ 559.246826] ? zap_class+0x640/0x640 [ 559.246841] ? __ia32_compat_sys_open+0x79/0xb0 [ 559.246870] ? entry_SYSENTER_compat+0x70/0x7f [ 559.246884] ? zap_class+0x640/0x640 [ 559.246903] ? find_held_lock+0x36/0x1c0 [ 559.255297] ? __lock_is_held+0xb5/0x140 [ 559.255407] ? vivid_update_format_cap+0x17f8/0x1e20 [ 559.255439] ? perf_trace_sched_process_exec+0x860/0x860 [ 559.264933] ? lock_downgrade+0x900/0x900 [ 559.264959] __should_failslab+0x124/0x180 [ 559.264979] should_failslab+0x9/0x14 [ 559.264994] kmem_cache_alloc+0x2be/0x730 [ 559.265029] ima_d_path+0x52/0x1e8 [ 559.273703] process_measurement+0xddf/0x1bf0 [ 559.273717] ? zap_class+0x640/0x640 [ 559.273748] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 559.281584] ? find_held_lock+0x36/0x1c0 [ 559.281617] ? lock_downgrade+0x900/0x900 [ 559.281635] ? check_preemption_disabled+0x48/0x280 [ 559.281654] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 559.291091] ? kasan_check_read+0x11/0x20 [ 559.291108] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 559.291124] ? rcu_softirq_qs+0x20/0x20 [ 559.291157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 559.298952] ? refcount_sub_and_test_checked+0x203/0x310 [ 559.298975] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 559.299032] ? aa_capable+0xe30/0xe30 [ 559.299060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 559.308198] ? do_dentry_open+0x945/0x1250 [ 559.308221] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 05:27:44 executing program 4: syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0xe80}, [], {@can={0xc, {{0x0, 0x1, 0x9ff, 0x80000000}, 0x2, 0x0, 0x0, 0x0, "ac950a9c7e975aab"}}}}, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x2]}) [ 559.308239] ? apparmor_task_getsecid+0x96/0xd0 [ 559.317833] ima_file_check+0xe5/0x130 [ 559.317851] ? process_measurement+0x1bf0/0x1bf0 [ 559.317866] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 559.317897] path_openat+0x134a/0x5150 [ 559.317919] ? lock_is_held_type+0x210/0x210 [ 559.325985] ? unwind_dump+0x190/0x190 [ 559.326031] ? path_lookupat.isra.43+0xc00/0xc00 [ 559.326045] ? unwind_get_return_address+0x61/0xa0 [ 559.326062] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 559.326080] ? expand_files.part.8+0x571/0x9a0 [ 559.326099] ? find_held_lock+0x36/0x1c0 [ 559.333949] ? __alloc_fd+0x347/0x6e0 [ 559.333968] ? lock_downgrade+0x900/0x900 [ 559.333987] ? getname+0x19/0x20 [ 559.342186] ? kasan_check_read+0x11/0x20 [ 559.342202] ? do_raw_spin_unlock+0xa7/0x330 [ 559.342216] ? do_raw_spin_trylock+0x270/0x270 [ 559.342236] ? __lock_is_held+0xb5/0x140 [ 559.351544] ? __check_object_size+0xb1/0x782 [ 559.351570] ? _raw_spin_unlock+0x2c/0x50 [ 559.351586] ? __alloc_fd+0x347/0x6e0 [ 559.360741] do_filp_open+0x255/0x380 [ 559.360760] ? may_open_dev+0x100/0x100 [ 559.360822] ? get_unused_fd_flags+0x122/0x1a0 [ 559.369891] ? __alloc_fd+0x6e0/0x6e0 [ 559.369920] do_sys_open+0x568/0x700 [ 559.369940] ? filp_open+0x80/0x80 [ 559.369975] ? trace_hardirqs_off_caller+0x310/0x310 [ 559.379238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 559.379254] ? __do_page_fault+0x491/0xe60 [ 559.379275] __ia32_compat_sys_open+0x79/0xb0 [ 559.379295] do_fast_syscall_32+0x34d/0xfb2 [ 559.379317] ? do_int80_syscall_32+0x890/0x890 05:27:45 executing program 0 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:45 executing program 3: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='coredump_filter\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x75, 0x7f, 0x8}, 0x0) creat(&(0x7f0000000800)='./bus/file0\x00', 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_open_pts(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x82, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000006c0)={'veth1_to_bridge\x00', 0x3}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0xddb) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50}, 0x50) pivot_root(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='./bus/file0\x00') [ 559.379334] ? entry_SYSENTER_compat+0x68/0x7f [ 559.379360] ? trace_hardirqs_off_caller+0xbb/0x310 [ 559.390319] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 559.390334] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 559.390356] ? trace_hardirqs_on_caller+0x310/0x310 [ 559.399649] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 559.399667] ? prepare_exit_to_usermode+0x291/0x3b0 [ 559.399689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 559.399712] entry_SYSENTER_compat+0x70/0x7f [ 559.399733] RIP: 0023:0xf7f01a29 [ 559.409497] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 559.409506] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 559.409521] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 559.409530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.409538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.409551] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 559.419725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.466306] audit: type=1804 audit(1543901264.955:80): pid=20560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="bus" dev="ramfs" ino=74551 res=1 05:27:45 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673fd", 0x0, &(0x7f000000a000)) [ 559.952220] FAULT_INJECTION: forcing a failure. [ 559.952220] name failslab, interval 1, probability 0, space 0, times 0 05:27:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) symlinkat(&(0x7f0000000500)='./file0\x00', r1, &(0x7f0000000580)='\x00') fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x1, 0x0) r2 = getuid() getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x5}, [{0x2, 0x7, r2}], {0x4, 0x1}, [{0x8, 0x4, r3}, {0x8, 0x4, r4}, {0x8, 0x1, r5}], {0x10, 0x7}, {0x20, 0x1}}, 0x44, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="5b643a3a5d3ac27c9f0094b2"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') [ 560.000571] CPU: 0 PID: 20586 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 560.007978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.007988] Call Trace: [ 560.008028] dump_stack+0x244/0x39d [ 560.008063] ? dump_stack_print_info.cold.1+0x20/0x20 [ 560.008092] ? perf_trace_lock+0x4a7/0x7a0 [ 560.008130] should_fail.cold.4+0xa/0x17 [ 560.008166] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 560.023846] ? lock_is_held_type+0x210/0x210 [ 560.042458] ? kasan_slab_alloc+0x12/0x20 [ 560.042482] ? integrity_inode_get+0x56/0x230 [ 560.042519] ? ima_file_check+0xe5/0x130 [ 560.042540] ? zap_class+0x640/0x640 [ 560.051086] ? __ia32_compat_sys_open+0x79/0xb0 [ 560.051107] ? entry_SYSENTER_compat+0x70/0x7f [ 560.051130] ? zap_class+0x640/0x640 [ 560.051174] ? find_held_lock+0x36/0x1c0 [ 560.051205] ? __lock_is_held+0xb5/0x140 [ 560.051255] ? perf_trace_sched_process_exec+0x860/0x860 [ 560.059804] ? lock_downgrade+0x900/0x900 [ 560.059840] __should_failslab+0x124/0x180 [ 560.059866] should_failslab+0x9/0x14 [ 560.059884] kmem_cache_alloc+0x2be/0x730 [ 560.059920] ima_d_path+0x52/0x1e8 [ 560.110052] process_measurement+0xddf/0x1bf0 [ 560.114566] ? zap_class+0x640/0x640 [ 560.117428] ceph: device name is missing path (no : separator in [d::]:Â|Ÿ) [ 560.118344] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 560.118370] ? find_held_lock+0x36/0x1c0 [ 560.118415] ? lock_downgrade+0x900/0x900 [ 560.118440] ? check_preemption_disabled+0x48/0x280 [ 560.144049] ? rcu_read_unlock_special+0x1c0/0x1c0 05:27:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) symlinkat(&(0x7f0000000500)='./file0\x00', r1, &(0x7f0000000580)='\x00') fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x1, 0x0) r2 = getuid() getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x5}, [{0x2, 0x7, r2}], {0x4, 0x1}, [{0x8, 0x4, r3}, {0x8, 0x4, r4}, {0x8, 0x1, r5}], {0x10, 0x7}, {0x20, 0x1}}, 0x44, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="5b643a3a5d3ac27c9f0094b2"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') [ 560.146500] ceph: device name is missing path (no : separator in [d::]:Â|Ÿ) [ 560.148997] ? kasan_check_read+0x11/0x20 [ 560.149025] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 560.149045] ? rcu_softirq_qs+0x20/0x20 [ 560.149083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.149102] ? refcount_sub_and_test_checked+0x203/0x310 [ 560.149127] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 560.149147] ? aa_capable+0xe30/0xe30 [ 560.190074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.195623] ? do_dentry_open+0x945/0x1250 [ 560.199897] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 560.205476] ? apparmor_task_getsecid+0x96/0xd0 [ 560.210181] ima_file_check+0xe5/0x130 [ 560.214106] ? process_measurement+0x1bf0/0x1bf0 [ 560.218882] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 560.224125] path_openat+0x134a/0x5150 [ 560.228051] ? lock_is_held_type+0x210/0x210 [ 560.232476] ? unwind_dump+0x190/0x190 [ 560.236421] ? path_lookupat.isra.43+0xc00/0xc00 [ 560.241196] ? unwind_get_return_address+0x61/0xa0 [ 560.246148] ? __sanitizer_cov_trace_cmp4+0x16/0x20 05:27:45 executing program 4: r0 = userfaultfd(0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r0, &(0x7f0000000000)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f000027a000/0x2000)=nil, 0x2000, 0x1e, 0x8031, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) [ 560.251186] ? expand_files.part.8+0x571/0x9a0 [ 560.255102] ceph: device name is missing path (no : separator in [d::]:Â|Ÿ) [ 560.255797] ? find_held_lock+0x36/0x1c0 [ 560.255835] ? __alloc_fd+0x347/0x6e0 [ 560.255858] ? lock_downgrade+0x900/0x900 [ 560.255876] ? getname+0x19/0x20 [ 560.255908] ? kasan_check_read+0x11/0x20 [ 560.282535] ? do_raw_spin_unlock+0xa7/0x330 [ 560.286985] ? do_raw_spin_trylock+0x270/0x270 [ 560.291599] ? __lock_is_held+0xb5/0x140 [ 560.295674] ? __check_object_size+0xb1/0x782 [ 560.300208] ? _raw_spin_unlock+0x2c/0x50 [ 560.304383] ? __alloc_fd+0x347/0x6e0 [ 560.308229] do_filp_open+0x255/0x380 [ 560.308253] ? may_open_dev+0x100/0x100 [ 560.308309] ? get_unused_fd_flags+0x122/0x1a0 [ 560.316055] ? __alloc_fd+0x6e0/0x6e0 [ 560.316098] do_sys_open+0x568/0x700 [ 560.328708] ? filp_open+0x80/0x80 [ 560.332299] ? trace_hardirqs_off_caller+0x310/0x310 [ 560.337436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.343050] ? __do_page_fault+0x491/0xe60 [ 560.347356] __ia32_compat_sys_open+0x79/0xb0 [ 560.351897] do_fast_syscall_32+0x34d/0xfb2 [ 560.356253] ? do_int80_syscall_32+0x890/0x890 [ 560.360869] ? entry_SYSENTER_compat+0x68/0x7f [ 560.365478] ? trace_hardirqs_off_caller+0xbb/0x310 [ 560.370573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 560.375456] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 560.380341] ? trace_hardirqs_on_caller+0x310/0x310 [ 560.385420] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 560.390812] ? prepare_exit_to_usermode+0x291/0x3b0 [ 560.395867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 560.400759] entry_SYSENTER_compat+0x70/0x7f [ 560.405177] RIP: 0023:0xf7f01a29 [ 560.408554] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 560.427462] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 560.435170] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 560.442470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 05:27:45 executing program 2: r0 = getpgid(0xffffffffffffffff) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x42f, 0x10}, 0xc) kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x121801, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x401) r4 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedsend(r4, &(0x7f00000000c0), 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, &(0x7f0000000180)) mq_timedreceive(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x9, 0x1) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4d0, 0x5, 0x0, 0xa, 0x20, 0x4, "f6daeb2b25285a207ab1651428e84f0216d0340ff4ed45018c02d120fc46e685f2e859ca4d08915191b8a117c0f013b63dd98fdd92bda141cff34c4b57120f08", "1e129a82b94f216adf16d82838ee43e75ca1239c6300a0a7d0119c45277decf8a915668ac269368921f486afc02fa2c4543a360d7d12b7283ee0e0cc5fd19d44", "8641280f81e0893383ae00bedb72e7f95ed4b7aa07bcd0dbf5e832e8bdb65497", [0x9]}) r6 = socket(0x2, 0x802, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x11) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0)) r7 = open(&(0x7f0000000740)='./file0\x00', 0x14104a, 0x0) sendmsg$rds(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]}, 0x20000000) ftruncate(r7, 0x8007ffc) sendfile(r6, r7, 0x0, 0x400008bca) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f00000001c0)={{0xfffffffffffffc00, 0x2}, {0x800, 0x3f}, 0x2, 0x2, 0x1a}) 05:27:45 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) [ 560.449744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.457032] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 560.464311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.474295] audit: type=1804 audit(1543901265.965:81): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="bus" dev="ramfs" ino=74627 res=1 05:27:46 executing program 0 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 560.642090] FAULT_INJECTION: forcing a failure. [ 560.642090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 560.653951] CPU: 0 PID: 20610 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 560.661308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.670669] Call Trace: [ 560.673303] dump_stack+0x244/0x39d [ 560.676952] ? dump_stack_print_info.cold.1+0x20/0x20 [ 560.682153] ? perf_trace_run_bpf_submit+0x267/0x330 [ 560.687319] should_fail.cold.4+0xa/0x17 05:27:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="ae9c4ea1028686a728bb65f093f46330727c44") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000400)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x480, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000040)={0x7f000, 0x2}) [ 560.691419] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 560.696566] ? perf_trace_run_bpf_submit+0x267/0x330 [ 560.701698] ? perf_trace_run_bpf_submit+0x267/0x330 [ 560.706841] ? perf_tp_event+0xc20/0xc20 [ 560.710925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.716497] ? check_preemption_disabled+0x48/0x280 [ 560.721542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.727111] ? check_preemption_disabled+0x48/0x280 [ 560.732156] ? memset+0x31/0x40 [ 560.735479] ? perf_trace_lock+0x4a7/0x7a0 [ 560.739751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.745328] ? should_fail+0x22d/0xd01 [ 560.749244] ? lock_is_held_type+0x210/0x210 [ 560.753688] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 560.758846] __alloc_pages_nodemask+0x366/0xea0 [ 560.763553] ? kasan_slab_alloc+0x12/0x20 [ 560.767739] ? integrity_inode_get+0x56/0x230 [ 560.772271] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 560.777322] ? entry_SYSENTER_compat+0x70/0x7f [ 560.781951] ? zap_class+0x640/0x640 [ 560.785691] ? find_held_lock+0x36/0x1c0 05:27:46 executing program 2: r0 = getpgid(0xffffffffffffffff) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x42f, 0x10}, 0xc) kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x121801, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x401) r4 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedsend(r4, &(0x7f00000000c0), 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, &(0x7f0000000180)) mq_timedreceive(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x9, 0x1) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4d0, 0x5, 0x0, 0xa, 0x20, 0x4, "f6daeb2b25285a207ab1651428e84f0216d0340ff4ed45018c02d120fc46e685f2e859ca4d08915191b8a117c0f013b63dd98fdd92bda141cff34c4b57120f08", "1e129a82b94f216adf16d82838ee43e75ca1239c6300a0a7d0119c45277decf8a915668ac269368921f486afc02fa2c4543a360d7d12b7283ee0e0cc5fd19d44", "8641280f81e0893383ae00bedb72e7f95ed4b7aa07bcd0dbf5e832e8bdb65497", [0x9]}) r6 = socket(0x2, 0x802, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x11) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0)) r7 = open(&(0x7f0000000740)='./file0\x00', 0x14104a, 0x0) sendmsg$rds(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]}, 0x20000000) ftruncate(r7, 0x8007ffc) sendfile(r6, r7, 0x0, 0x400008bca) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f00000001c0)={{0xfffffffffffffc00, 0x2}, {0x800, 0x3f}, 0x2, 0x2, 0x1a}) [ 560.785780] ? trace_hardirqs_off+0xb8/0x310 [ 560.785810] cache_grow_begin+0xa5/0x8c0 [ 560.798366] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 560.803918] ? check_preemption_disabled+0x48/0x280 [ 560.803952] kmem_cache_alloc+0x66b/0x730 [ 560.803992] ima_d_path+0x52/0x1e8 [ 560.804031] process_measurement+0xddf/0x1bf0 [ 560.804050] ? zap_class+0x640/0x640 [ 560.824996] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 560.830325] ? find_held_lock+0x36/0x1c0 [ 560.834443] ? lock_downgrade+0x900/0x900 [ 560.838622] ? check_preemption_disabled+0x48/0x280 [ 560.843667] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 560.848621] ? kasan_check_read+0x11/0x20 [ 560.852795] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 560.858109] ? rcu_softirq_qs+0x20/0x20 [ 560.862142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.867733] ? refcount_sub_and_test_checked+0x203/0x310 [ 560.873244] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 560.878740] ? aa_capable+0xe30/0xe30 [ 560.882581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 560.888144] ? do_dentry_open+0x945/0x1250 [ 560.892428] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 560.898000] ? apparmor_task_getsecid+0x96/0xd0 [ 560.902719] ima_file_check+0xe5/0x130 [ 560.906646] ? process_measurement+0x1bf0/0x1bf0 [ 560.911424] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 560.916679] path_openat+0x134a/0x5150 [ 560.920593] ? lock_is_held_type+0x210/0x210 [ 560.925030] ? unwind_dump+0x190/0x190 [ 560.928988] ? path_lookupat.isra.43+0xc00/0xc00 [ 560.933780] ? unwind_get_return_address+0x61/0xa0 05:27:46 executing program 2: r0 = getpgid(0xffffffffffffffff) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x42f, 0x10}, 0xc) kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x121801, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x401) r4 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedsend(r4, &(0x7f00000000c0), 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, &(0x7f0000000180)) mq_timedreceive(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x9, 0x1) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4d0, 0x5, 0x0, 0xa, 0x20, 0x4, "f6daeb2b25285a207ab1651428e84f0216d0340ff4ed45018c02d120fc46e685f2e859ca4d08915191b8a117c0f013b63dd98fdd92bda141cff34c4b57120f08", "1e129a82b94f216adf16d82838ee43e75ca1239c6300a0a7d0119c45277decf8a915668ac269368921f486afc02fa2c4543a360d7d12b7283ee0e0cc5fd19d44", "8641280f81e0893383ae00bedb72e7f95ed4b7aa07bcd0dbf5e832e8bdb65497", [0x9]}) r6 = socket(0x2, 0x802, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x11) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0)) r7 = open(&(0x7f0000000740)='./file0\x00', 0x14104a, 0x0) sendmsg$rds(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]}, 0x20000000) ftruncate(r7, 0x8007ffc) sendfile(r6, r7, 0x0, 0x400008bca) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f00000001c0)={{0xfffffffffffffc00, 0x2}, {0x800, 0x3f}, 0x2, 0x2, 0x1a}) [ 560.938729] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 560.943762] ? expand_files.part.8+0x571/0x9a0 [ 560.948376] ? find_held_lock+0x36/0x1c0 [ 560.952508] ? __alloc_fd+0x347/0x6e0 [ 560.956337] ? lock_downgrade+0x900/0x900 [ 560.960497] ? getname+0x19/0x20 [ 560.963897] ? kasan_check_read+0x11/0x20 [ 560.968066] ? do_raw_spin_unlock+0xa7/0x330 [ 560.972509] ? do_raw_spin_trylock+0x270/0x270 [ 560.977112] ? __lock_is_held+0xb5/0x140 [ 560.981195] ? __check_object_size+0xb1/0x782 [ 560.985730] ? _raw_spin_unlock+0x2c/0x50 [ 560.989933] ? __alloc_fd+0x347/0x6e0 [ 560.993811] do_filp_open+0x255/0x380 [ 560.997638] ? may_open_dev+0x100/0x100 [ 561.001668] ? get_unused_fd_flags+0x122/0x1a0 [ 561.006304] ? __alloc_fd+0x6e0/0x6e0 [ 561.010172] do_sys_open+0x568/0x700 [ 561.013932] ? filp_open+0x80/0x80 [ 561.017545] ? trace_hardirqs_off_caller+0x310/0x310 [ 561.022670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 561.028229] ? __do_page_fault+0x491/0xe60 [ 561.032541] __ia32_compat_sys_open+0x79/0xb0 [ 561.037094] do_fast_syscall_32+0x34d/0xfb2 [ 561.041480] ? do_int80_syscall_32+0x890/0x890 [ 561.046100] ? entry_SYSENTER_compat+0x68/0x7f [ 561.050711] ? trace_hardirqs_off_caller+0xbb/0x310 [ 561.055747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.060609] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.065473] ? trace_hardirqs_on_caller+0x310/0x310 [ 561.070527] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 561.075569] ? prepare_exit_to_usermode+0x291/0x3b0 [ 561.080650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.085526] entry_SYSENTER_compat+0x70/0x7f [ 561.089955] RIP: 0023:0xf7f01a29 05:27:46 executing program 3: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='coredump_filter\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x75, 0x7f, 0x8}, 0x0) creat(&(0x7f0000000800)='./bus/file0\x00', 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_open_pts(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x82, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000006c0)={'veth1_to_bridge\x00', 0x3}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0xddb) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50}, 0x50) pivot_root(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='./bus/file0\x00') 05:27:46 executing program 2: r0 = getpgid(0xffffffffffffffff) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x42f, 0x10}, 0xc) kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x121801, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x401) r4 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedsend(r4, &(0x7f00000000c0), 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, &(0x7f0000000180)) mq_timedreceive(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x9, 0x1) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4d0, 0x5, 0x0, 0xa, 0x20, 0x4, "f6daeb2b25285a207ab1651428e84f0216d0340ff4ed45018c02d120fc46e685f2e859ca4d08915191b8a117c0f013b63dd98fdd92bda141cff34c4b57120f08", "1e129a82b94f216adf16d82838ee43e75ca1239c6300a0a7d0119c45277decf8a915668ac269368921f486afc02fa2c4543a360d7d12b7283ee0e0cc5fd19d44", "8641280f81e0893383ae00bedb72e7f95ed4b7aa07bcd0dbf5e832e8bdb65497", [0x9]}) r6 = socket(0x2, 0x802, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x11) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0)) r7 = open(&(0x7f0000000740)='./file0\x00', 0x14104a, 0x0) sendmsg$rds(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]}, 0x20000000) ftruncate(r7, 0x8007ffc) sendfile(r6, r7, 0x0, 0x400008bca) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f00000001c0)={{0xfffffffffffffc00, 0x2}, {0x800, 0x3f}, 0x2, 0x2, 0x1a}) [ 561.093341] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 561.112272] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 561.120020] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 561.127336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.134621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 05:27:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/45, &(0x7f0000000080)=0x2d) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300), 0x14) inotify_init() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000480)) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x31, 0x6, 0x0, {0x0, 0x6, 0x8, 0x0, "6e6f6465763aee40"}}, 0x31) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) sendmmsg(r1, &(0x7f00000003c0), 0x7ffff2f, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x62, 0x200, 0x2, 0x4, 0x9}, &(0x7f0000000100)=0x98) socket$nl_crypto(0x10, 0x3, 0x15) [ 561.141907] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 561.149200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.160775] audit: type=1804 audit(1543901266.655:82): pid=20610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/102/file0/bus" dev="ramfs" ino=74659 res=1 05:27:46 executing program 0 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x16, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000140)) 05:27:46 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="bfb37737490ef277a1c9b4aaaaaaaaaaaaff7fffffffff0800490000240000000000009078ac9414bbac1414aa44100501a0728a17800000360000000000009078e0000001"], &(0x7f0000000040)) [ 561.383992] FAULT_INJECTION: forcing a failure. [ 561.383992] name failslab, interval 1, probability 0, space 0, times 0 05:27:46 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) [ 561.470640] CPU: 1 PID: 20644 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 561.478093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.487468] Call Trace: [ 561.490164] dump_stack+0x244/0x39d [ 561.493825] ? dump_stack_print_info.cold.1+0x20/0x20 [ 561.499050] ? lock_downgrade+0x900/0x900 [ 561.503220] should_fail.cold.4+0xa/0x17 [ 561.507300] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 561.512423] ? rcu_softirq_qs+0x20/0x20 [ 561.516406] ? unwind_dump+0x190/0x190 [ 561.520318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 561.525954] ? prepend_path.isra.8+0xbaa/0x1700 [ 561.530749] ? zap_class+0x640/0x640 [ 561.534515] ? __lock_is_held+0xb5/0x140 [ 561.538598] ? kasan_kmalloc+0xc7/0xe0 [ 561.542509] ? path_openat+0x134a/0x5150 [ 561.546584] ? perf_trace_sched_process_exec+0x860/0x860 [ 561.552073] ? do_fast_syscall_32+0x34d/0xfb2 [ 561.556611] ? entry_SYSENTER_compat+0x70/0x7f [ 561.561222] ? find_held_lock+0x36/0x1c0 [ 561.565308] __should_failslab+0x124/0x180 [ 561.569560] should_failslab+0x9/0x14 [ 561.573374] __kmalloc+0x2e0/0x760 [ 561.576934] ? ima_alloc_init_template+0x65/0x3b0 [ 561.581805] ima_alloc_init_template+0x65/0x3b0 [ 561.586492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 561.592059] ima_add_violation+0x1e3/0x390 [ 561.596339] ? ima_store_template+0x310/0x310 [ 561.600867] ? rcu_read_lock_sched_held+0x14f/0x180 [ 561.605928] ? kmem_cache_alloc+0x33a/0x730 [ 561.610273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 561.615824] ? ima_d_path+0x113/0x1e8 [ 561.619642] process_measurement+0xe1c/0x1bf0 [ 561.624155] ? zap_class+0x640/0x640 [ 561.627902] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 561.633195] ? find_held_lock+0x36/0x1c0 [ 561.637284] ? lock_downgrade+0x900/0x900 [ 561.641447] ? check_preemption_disabled+0x48/0x280 [ 561.646482] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 561.651425] ? kasan_check_read+0x11/0x20 [ 561.655584] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 561.660871] ? rcu_softirq_qs+0x20/0x20 [ 561.664869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 561.670419] ? refcount_sub_and_test_checked+0x203/0x310 [ 561.675887] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 561.681378] ? aa_capable+0xe30/0xe30 [ 561.685217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 561.690764] ? do_dentry_open+0x945/0x1250 [ 561.695032] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 561.700580] ? apparmor_task_getsecid+0x96/0xd0 [ 561.705270] ima_file_check+0xe5/0x130 [ 561.709195] ? process_measurement+0x1bf0/0x1bf0 [ 561.713963] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 561.719182] path_openat+0x134a/0x5150 [ 561.723087] ? lock_is_held_type+0x210/0x210 [ 561.727507] ? unwind_dump+0x190/0x190 [ 561.731431] ? path_lookupat.isra.43+0xc00/0xc00 [ 561.736203] ? unwind_get_return_address+0x61/0xa0 [ 561.741152] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 561.746190] ? expand_files.part.8+0x571/0x9a0 [ 561.750801] ? find_held_lock+0x36/0x1c0 [ 561.754889] ? __alloc_fd+0x347/0x6e0 [ 561.758706] ? lock_downgrade+0x900/0x900 [ 561.762868] ? getname+0x19/0x20 [ 561.766259] ? kasan_check_read+0x11/0x20 [ 561.770422] ? do_raw_spin_unlock+0xa7/0x330 [ 561.774850] ? do_raw_spin_trylock+0x270/0x270 [ 561.779442] ? __lock_is_held+0xb5/0x140 [ 561.783514] ? __check_object_size+0xb1/0x782 [ 561.788043] ? _raw_spin_unlock+0x2c/0x50 [ 561.792212] ? __alloc_fd+0x347/0x6e0 [ 561.796064] do_filp_open+0x255/0x380 [ 561.799908] ? may_open_dev+0x100/0x100 [ 561.803928] ? get_unused_fd_flags+0x122/0x1a0 [ 561.808536] ? __alloc_fd+0x6e0/0x6e0 [ 561.812364] do_sys_open+0x568/0x700 [ 561.816099] ? filp_open+0x80/0x80 [ 561.819661] ? trace_hardirqs_off_caller+0x310/0x310 [ 561.824780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 561.830337] ? __do_page_fault+0x491/0xe60 [ 561.834593] __ia32_compat_sys_open+0x79/0xb0 [ 561.839109] do_fast_syscall_32+0x34d/0xfb2 [ 561.843455] ? do_int80_syscall_32+0x890/0x890 [ 561.848100] ? entry_SYSENTER_compat+0x68/0x7f [ 561.852734] ? trace_hardirqs_off_caller+0xbb/0x310 [ 561.857805] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.862675] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.867530] ? trace_hardirqs_on_caller+0x310/0x310 [ 561.872558] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 561.877587] ? prepare_exit_to_usermode+0x291/0x3b0 [ 561.882637] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.887512] entry_SYSENTER_compat+0x70/0x7f [ 561.891928] RIP: 0023:0xf7f01a29 [ 561.895308] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 561.914217] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 05:27:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/45, &(0x7f0000000080)=0x2d) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300), 0x14) inotify_init() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000480)) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x31, 0x6, 0x0, {0x0, 0x6, 0x8, 0x0, "6e6f6465763aee40"}}, 0x31) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) sendmmsg(r1, &(0x7f00000003c0), 0x7ffff2f, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x62, 0x200, 0x2, 0x4, 0x9}, &(0x7f0000000100)=0x98) socket$nl_crypto(0x10, 0x3, 0x15) 05:27:47 executing program 2: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x4054e56a7f5e766c}, @val, @x25}, 0x1ab) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000100)=0x1, 0x1) 05:27:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000840), 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000600)=""/169) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd(0x9b) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000006c0)={0x9, 0xffffffff, 0x0, 0x9, 0x6, 0x4, 0x7, 0x0, 0x3, 0x6, 0x5}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)="666f00c3839406000000") accept4$vsock_stream(r4, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) read(r7, &(0x7f0000000380)=""/245, 0xf5) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e22, 0x200, @local, 0x8b}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r8, 0x8003}, 0xffffffffffffffac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0x16, 0x1, &(0x7f0000000300)="31b9f3e45542acc12a0adf8f2c1e94d1d74321cffff2", &(0x7f0000000340)=""/1, 0x8}, 0x28) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000002c0)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000780)=0x3) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000800)={0x0, 0x2, 0x7fff}, 0x352) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f00000000c0)=""/174) [ 561.921935] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 561.929212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.936491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.943761] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 561.951041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.977558] audit: type=1804 audit(1543901267.475:83): pid=20644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/103/file0/bus" dev="ramfs" ino=73603 res=0 05:27:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x800, 0x1}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 05:27:47 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) 05:27:47 executing program 0 (fault-call:4 fault-nth:8): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:47 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) getrandom(&(0x7f0000000040)=""/59, 0xfe63, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) 05:27:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x0) [ 562.505163] FAULT_INJECTION: forcing a failure. [ 562.505163] name failslab, interval 1, probability 0, space 0, times 0 05:27:48 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:48 executing program 4: getrusage(0x0, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x6, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4a5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x611e, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:27:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) dup3(r2, r0, 0x0) 05:27:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats_percpu\x00') pread64(r0, 0x0, 0x0, 0x0) [ 562.900832] CPU: 0 PID: 20681 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 562.908262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.917645] Call Trace: [ 562.920275] dump_stack+0x244/0x39d [ 562.923958] ? dump_stack_print_info.cold.1+0x20/0x20 [ 562.929200] ? perf_trace_lock+0x4a7/0x7a0 [ 562.933483] should_fail.cold.4+0xa/0x17 [ 562.937581] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 562.942725] ? lock_downgrade+0x900/0x900 [ 562.946905] ? check_preemption_disabled+0x48/0x280 [ 562.951952] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 562.957260] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 562.962320] ? zap_class+0x640/0x640 [ 562.966085] ? set_precision+0xe0/0xe0 [ 562.970028] ? find_held_lock+0x36/0x1c0 [ 562.974138] ? __lock_is_held+0xb5/0x140 [ 562.978259] ? perf_trace_sched_process_exec+0x860/0x860 [ 562.983780] __should_failslab+0x124/0x180 [ 562.988069] should_failslab+0x9/0x14 [ 562.991915] __kmalloc+0x2e0/0x760 [ 562.995489] ? snprintf+0xae/0xe0 [ 562.998963] ? vsprintf+0x40/0x40 [ 563.002440] ? ima_write_template_field_data.isra.1+0x53/0x200 [ 563.008452] ima_write_template_field_data.isra.1+0x53/0x200 [ 563.014297] ima_eventdigest_init_common+0x15d/0x270 [ 563.019430] ? ima_write_template_field_data.isra.1+0x200/0x200 [ 563.025546] ? msi_domain_alloc+0x250/0x300 [ 563.029885] ? __kmalloc+0x5ee/0x760 [ 563.029935] ima_eventdigest_ng_init+0x5c/0x140 [ 563.029961] ima_alloc_init_template+0x256/0x3b0 [ 563.029996] ima_add_violation+0x1e3/0x390 [ 563.038441] ? ima_store_template+0x310/0x310 [ 563.038467] ? kmem_cache_alloc+0x33a/0x730 [ 563.038508] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 563.038526] ? ima_d_path+0x113/0x1e8 [ 563.038552] process_measurement+0xe1c/0x1bf0 [ 563.038567] ? zap_class+0x640/0x640 [ 563.038613] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 563.079232] ? find_held_lock+0x36/0x1c0 [ 563.083360] ? lock_downgrade+0x900/0x900 [ 563.087532] ? check_preemption_disabled+0x48/0x280 [ 563.092583] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 563.097537] ? kasan_check_read+0x11/0x20 [ 563.101713] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 563.107029] ? rcu_softirq_qs+0x20/0x20 [ 563.111085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 563.116649] ? refcount_sub_and_test_checked+0x203/0x310 [ 563.122130] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 563.127598] ? aa_capable+0xe30/0xe30 [ 563.131431] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 563.136981] ? do_dentry_open+0x945/0x1250 [ 563.141267] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 563.146824] ? apparmor_task_getsecid+0x96/0xd0 [ 563.151522] ima_file_check+0xe5/0x130 [ 563.155426] ? process_measurement+0x1bf0/0x1bf0 [ 563.160193] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 563.165472] path_openat+0x134a/0x5150 [ 563.169408] ? lock_is_held_type+0x210/0x210 [ 563.173826] ? unwind_dump+0x190/0x190 [ 563.177764] ? path_lookupat.isra.43+0xc00/0xc00 [ 563.182531] ? unwind_get_return_address+0x61/0xa0 [ 563.187700] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 563.192731] ? expand_files.part.8+0x571/0x9a0 [ 563.197345] ? find_held_lock+0x36/0x1c0 [ 563.201435] ? __alloc_fd+0x347/0x6e0 [ 563.205255] ? lock_downgrade+0x900/0x900 [ 563.209423] ? getname+0x19/0x20 [ 563.212816] ? kasan_check_read+0x11/0x20 [ 563.217008] ? do_raw_spin_unlock+0xa7/0x330 [ 563.221439] ? do_raw_spin_trylock+0x270/0x270 [ 563.226045] ? __lock_is_held+0xb5/0x140 [ 563.230137] ? __check_object_size+0xb1/0x782 [ 563.234666] ? _raw_spin_unlock+0x2c/0x50 [ 563.238856] ? __alloc_fd+0x347/0x6e0 [ 563.242710] do_filp_open+0x255/0x380 [ 563.246525] ? may_open_dev+0x100/0x100 [ 563.250550] ? get_unused_fd_flags+0x122/0x1a0 [ 563.255146] ? __alloc_fd+0x6e0/0x6e0 [ 563.258987] do_sys_open+0x568/0x700 [ 563.262732] ? filp_open+0x80/0x80 [ 563.266301] ? trace_hardirqs_off_caller+0x310/0x310 [ 563.271454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 563.277028] ? __do_page_fault+0x491/0xe60 [ 563.281306] __ia32_compat_sys_open+0x79/0xb0 [ 563.285837] do_fast_syscall_32+0x34d/0xfb2 [ 563.290217] ? do_int80_syscall_32+0x890/0x890 [ 563.294821] ? entry_SYSENTER_compat+0x68/0x7f [ 563.299423] ? trace_hardirqs_off_caller+0xbb/0x310 [ 563.304452] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.309315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.314181] ? trace_hardirqs_on_caller+0x310/0x310 [ 563.319214] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 563.324252] ? prepare_exit_to_usermode+0x291/0x3b0 [ 563.329305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.334183] entry_SYSENTER_compat+0x70/0x7f [ 563.338607] RIP: 0023:0xf7f01a29 [ 563.341992] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 563.360928] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 563.368668] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 563.375970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.383280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.390586] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 563.397902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:27:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/45, &(0x7f0000000080)=0x2d) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300), 0x14) inotify_init() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000480)) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x31, 0x6, 0x0, {0x0, 0x6, 0x8, 0x0, "6e6f6465763aee40"}}, 0x31) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) sendmmsg(r1, &(0x7f00000003c0), 0x7ffff2f, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x62, 0x200, 0x2, 0x4, 0x9}, &(0x7f0000000100)=0x98) socket$nl_crypto(0x10, 0x3, 0x15) 05:27:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="08001000000000000800050000000000"], 0x1}}, 0x0) 05:27:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./control\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) 05:27:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), 0x0}, 0x18) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000001c0)=0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000001c0), 0x0}, 0x18) [ 563.427064] audit: type=1804 audit(1543901268.915:84): pid=20681 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/104/file0/bus" dev="ramfs" ino=74777 res=0 05:27:49 executing program 0 (fault-call:4 fault-nth:9): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:27:49 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)="00726964ff7a7e8000", 0x230) [ 563.585454] FAULT_INJECTION: forcing a failure. [ 563.585454] name failslab, interval 1, probability 0, space 0, times 0 [ 563.631724] CPU: 1 PID: 20717 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 563.639131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.648492] Call Trace: [ 563.651104] dump_stack+0x244/0x39d [ 563.654761] ? dump_stack_print_info.cold.1+0x20/0x20 [ 563.659980] ? debug_smp_processor_id+0x1c/0x20 [ 563.664672] ? perf_trace_lock+0x14d/0x7a0 [ 563.668945] should_fail.cold.4+0xa/0x17 [ 563.673038] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 563.678176] ? audit_filter+0x67d/0xda0 [ 563.682169] ? lock_downgrade+0x900/0x900 [ 563.686329] ? zap_class+0x640/0x640 [ 563.690057] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 563.695005] ? kasan_check_read+0x11/0x20 [ 563.699192] ? find_held_lock+0x36/0x1c0 [ 563.703274] ? __lock_is_held+0xb5/0x140 [ 563.707367] ? kasan_check_read+0x11/0x20 [ 563.711530] ? perf_trace_sched_process_exec+0x860/0x860 [ 563.716998] ? rcu_softirq_qs+0x20/0x20 [ 563.721006] __should_failslab+0x124/0x180 [ 563.725271] should_failslab+0x9/0x14 [ 563.729085] kmem_cache_alloc+0x2be/0x730 [ 563.733338] audit_log_start+0x554/0x9e0 [ 563.737428] ? audit_log_task_context+0x290/0x290 [ 563.742283] ? ima_get_binary_runtime_size+0x50/0x50 [ 563.747419] ? rcu_read_lock_sched_held+0x14f/0x180 [ 563.752445] ? __kmalloc+0x5ee/0x760 [ 563.756188] ? memcpy+0x45/0x50 [ 563.759487] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 563.764521] ? ima_write_template_field_data.isra.1+0xe2/0x200 [ 563.770510] integrity_audit_msg+0x10c/0x490 [ 563.774928] ? ima_store_template+0x22c/0x310 [ 563.779439] ? integrity_kernel_read+0x200/0x200 [ 563.784208] ? ima_alloc_init_template+0x3b0/0x3b0 [ 563.789152] ? ima_alloc_init_template+0x2c8/0x3b0 [ 563.794104] ima_add_violation+0x27a/0x390 [ 563.798358] ? ima_store_template+0x310/0x310 [ 563.802871] ? kmem_cache_alloc+0x33a/0x730 [ 563.807222] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 563.812770] ? ima_d_path+0x113/0x1e8 [ 563.816596] process_measurement+0xe1c/0x1bf0 [ 563.821105] ? zap_class+0x640/0x640 [ 563.824854] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 563.830148] ? find_held_lock+0x36/0x1c0 [ 563.834249] ? lock_downgrade+0x900/0x900 [ 563.838417] ? check_preemption_disabled+0x48/0x280 [ 563.843448] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 563.848393] ? kasan_check_read+0x11/0x20 [ 563.852555] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 563.857844] ? rcu_softirq_qs+0x20/0x20 [ 563.861873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 563.867423] ? refcount_sub_and_test_checked+0x203/0x310 [ 563.872896] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 563.878377] ? aa_capable+0xe30/0xe30 [ 563.882208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 563.887759] ? do_dentry_open+0x945/0x1250 [ 563.892035] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 563.897584] ? apparmor_task_getsecid+0x96/0xd0 [ 563.902275] ima_file_check+0xe5/0x130 [ 563.906178] ? process_measurement+0x1bf0/0x1bf0 [ 563.910943] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 563.916160] path_openat+0x134a/0x5150 [ 563.920063] ? lock_is_held_type+0x210/0x210 [ 563.924484] ? unwind_dump+0x190/0x190 [ 563.928402] ? path_lookupat.isra.43+0xc00/0xc00 [ 563.933162] ? unwind_get_return_address+0x61/0xa0 [ 563.938098] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 563.943117] ? expand_files.part.8+0x571/0x9a0 [ 563.947713] ? find_held_lock+0x36/0x1c0 [ 563.951809] ? __alloc_fd+0x347/0x6e0 [ 563.955614] ? lock_downgrade+0x900/0x900 [ 563.959770] ? getname+0x19/0x20 [ 563.963152] ? kasan_check_read+0x11/0x20 [ 563.967306] ? do_raw_spin_unlock+0xa7/0x330 [ 563.971733] ? do_raw_spin_trylock+0x270/0x270 [ 563.976320] ? __lock_is_held+0xb5/0x140 [ 563.980386] ? __check_object_size+0xb1/0x782 [ 563.984894] ? _raw_spin_unlock+0x2c/0x50 [ 563.989052] ? __alloc_fd+0x347/0x6e0 [ 563.992883] do_filp_open+0x255/0x380 [ 563.996688] ? may_open_dev+0x100/0x100 [ 564.000686] ? get_unused_fd_flags+0x122/0x1a0 [ 564.005277] ? __alloc_fd+0x6e0/0x6e0 [ 564.009098] do_sys_open+0x568/0x700 [ 564.012845] ? filp_open+0x80/0x80 [ 564.016394] ? trace_hardirqs_off_caller+0x310/0x310 [ 564.021501] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.027051] ? __do_page_fault+0x491/0xe60 [ 564.031340] __ia32_compat_sys_open+0x79/0xb0 [ 564.035844] do_fast_syscall_32+0x34d/0xfb2 [ 564.040177] ? do_int80_syscall_32+0x890/0x890 [ 564.044780] ? entry_SYSENTER_compat+0x68/0x7f [ 564.049374] ? trace_hardirqs_off_caller+0xbb/0x310 [ 564.054397] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.059245] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.064096] ? trace_hardirqs_on_caller+0x310/0x310 [ 564.069124] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 564.074145] ? prepare_exit_to_usermode+0x291/0x3b0 [ 564.079173] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.084063] entry_SYSENTER_compat+0x70/0x7f [ 564.088475] RIP: 0023:0xf7f01a29 [ 564.091843] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 564.110742] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 564.118449] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 [ 564.125713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 05:27:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x2) write$binfmt_misc(r0, &(0x7f0000000440)={'syz1'}, 0x1200e) 05:27:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000072b7e5ff0000000095000000000000fa"], 0x0, 0xfffffffffffffffc, 0xc3, &(0x7f0000000000)=""/195}, 0x48) [ 564.132979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.140244] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.147510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.162915] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 564.181147] audit: out of memory in audit_log_start 05:27:49 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) 05:27:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x2) write$binfmt_misc(r0, &(0x7f0000000440)={'syz1'}, 0x1200e) 05:27:49 executing program 0 (fault-call:4 fault-nth:10): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 564.509499] FAULT_INJECTION: forcing a failure. [ 564.509499] name failslab, interval 1, probability 0, space 0, times 0 [ 564.539064] CPU: 1 PID: 20746 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #265 [ 564.546458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.555833] Call Trace: [ 564.558446] dump_stack+0x244/0x39d [ 564.562099] ? dump_stack_print_info.cold.1+0x20/0x20 [ 564.567319] ? debug_smp_processor_id+0x1c/0x20 [ 564.572004] ? perf_trace_lock+0x14d/0x7a0 [ 564.576270] should_fail.cold.4+0xa/0x17 [ 564.580352] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 564.585488] ? zap_class+0x640/0x640 [ 564.589224] ? __mutex_lock+0x85e/0x16f0 [ 564.593296] ? lock_downgrade+0x900/0x900 [ 564.597470] ? ima_add_template_entry+0xcc/0x7f0 [ 564.602247] ? find_held_lock+0x36/0x1c0 [ 564.606330] ? __lock_is_held+0xb5/0x140 [ 564.610486] ? scrub_enumerate_chunks+0x1068/0x19a0 [ 564.615536] ? perf_trace_sched_process_exec+0x860/0x860 [ 564.620998] ? __kernel_text_address+0xd/0x40 [ 564.625524] __should_failslab+0x124/0x180 [ 564.629782] should_failslab+0x9/0x14 [ 564.633633] kmem_cache_alloc_trace+0x2d7/0x750 [ 564.638339] ? save_stack+0xa9/0xd0 [ 564.641989] ima_add_digest_entry+0xcb/0x6a0 [ 564.646413] ? process_measurement+0xe1c/0x1bf0 [ 564.651091] ? ima_file_check+0xe5/0x130 [ 564.655161] ? path_openat+0x134a/0x5150 [ 564.659231] ? ima_release_policy.cold.4+0xcf/0xcf [ 564.664166] ? entry_SYSENTER_compat+0x70/0x7f [ 564.668762] ? find_held_lock+0x36/0x1c0 [ 564.672847] ? zap_class+0x640/0x640 [ 564.676588] ima_add_template_entry+0x655/0x7f0 [ 564.681281] ? ima_get_binary_runtime_size+0x50/0x50 [ 564.686425] ? rcu_read_lock_sched_held+0x14f/0x180 [ 564.691450] ? __kmalloc+0x5ee/0x760 [ 564.695186] ? memcpy+0x45/0x50 [ 564.698477] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 564.703506] ? ima_write_template_field_data.isra.1+0xe2/0x200 [ 564.709492] ima_store_template+0x224/0x310 [ 564.713831] ? ima_alloc_init_template+0x3b0/0x3b0 [ 564.718779] ? ima_alloc_init_template+0x2c8/0x3b0 [ 564.723733] ima_add_violation+0x241/0x390 [ 564.727979] ? ima_store_template+0x310/0x310 [ 564.732499] ? kmem_cache_alloc+0x33a/0x730 [ 564.736872] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 564.742411] ? ima_d_path+0x113/0x1e8 [ 564.746226] process_measurement+0xe1c/0x1bf0 [ 564.750727] ? zap_class+0x640/0x640 [ 564.754482] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 564.759766] ? find_held_lock+0x36/0x1c0 [ 564.763850] ? lock_downgrade+0x900/0x900 [ 564.767998] ? check_preemption_disabled+0x48/0x280 [ 564.773039] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 564.777973] ? kasan_check_read+0x11/0x20 [ 564.782128] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 564.787406] ? rcu_softirq_qs+0x20/0x20 [ 564.791403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.796956] ? refcount_sub_and_test_checked+0x203/0x310 [ 564.802440] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 564.807910] ? aa_capable+0xe30/0xe30 [ 564.811734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.817272] ? do_dentry_open+0x945/0x1250 [ 564.821518] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 564.827060] ? apparmor_task_getsecid+0x96/0xd0 [ 564.831748] ima_file_check+0xe5/0x130 [ 564.835638] ? process_measurement+0x1bf0/0x1bf0 [ 564.840395] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 564.845606] path_openat+0x134a/0x5150 [ 564.849505] ? lock_is_held_type+0x210/0x210 [ 564.853916] ? unwind_dump+0x190/0x190 [ 564.857834] ? path_lookupat.isra.43+0xc00/0xc00 [ 564.862593] ? unwind_get_return_address+0x61/0xa0 [ 564.867529] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 564.872553] ? expand_files.part.8+0x571/0x9a0 [ 564.877148] ? find_held_lock+0x36/0x1c0 [ 564.881225] ? __alloc_fd+0x347/0x6e0 [ 564.885044] ? lock_downgrade+0x900/0x900 [ 564.889196] ? getname+0x19/0x20 [ 564.892596] ? kasan_check_read+0x11/0x20 [ 564.896768] ? do_raw_spin_unlock+0xa7/0x330 [ 564.901203] ? do_raw_spin_trylock+0x270/0x270 [ 564.905815] ? __lock_is_held+0xb5/0x140 [ 564.909893] ? __check_object_size+0xb1/0x782 [ 564.914406] ? _raw_spin_unlock+0x2c/0x50 [ 564.918578] ? __alloc_fd+0x347/0x6e0 [ 564.922417] do_filp_open+0x255/0x380 [ 564.926223] ? may_open_dev+0x100/0x100 [ 564.930226] ? get_unused_fd_flags+0x122/0x1a0 [ 564.934828] ? __alloc_fd+0x6e0/0x6e0 [ 564.938687] do_sys_open+0x568/0x700 [ 564.942415] ? filp_open+0x80/0x80 [ 564.945968] ? trace_hardirqs_off_caller+0x310/0x310 [ 564.951077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.956618] ? __do_page_fault+0x491/0xe60 [ 564.960886] __ia32_compat_sys_open+0x79/0xb0 [ 564.965417] do_fast_syscall_32+0x34d/0xfb2 [ 564.969751] ? do_int80_syscall_32+0x890/0x890 [ 564.974359] ? entry_SYSENTER_compat+0x68/0x7f [ 564.978948] ? trace_hardirqs_off_caller+0xbb/0x310 [ 564.983971] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.988823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.993695] ? trace_hardirqs_on_caller+0x310/0x310 [ 564.998716] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 565.003745] ? prepare_exit_to_usermode+0x291/0x3b0 [ 565.008776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 565.013661] entry_SYSENTER_compat+0x70/0x7f [ 565.018178] RIP: 0023:0xf7f01a29 [ 565.021552] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 565.040460] RSP: 002b:00000000f5efd0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 565.048174] RAX: ffffffffffffffda RBX: 0000000020eb6000 RCX: 0000000000000000 05:27:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/45, &(0x7f0000000080)=0x2d) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300), 0x14) inotify_init() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000480)) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x31, 0x6, 0x0, {0x0, 0x6, 0x8, 0x0, "6e6f6465763aee40"}}, 0x31) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) sendmmsg(r1, &(0x7f00000003c0), 0x7ffff2f, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x62, 0x200, 0x2, 0x4, 0x9}, &(0x7f0000000100)=0x98) socket$nl_crypto(0x10, 0x3, 0x15) 05:27:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, 0x0) [ 565.055443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.062726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.069993] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 565.077271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:27:50 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x50, &(0x7f00000002c0)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x3e00) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0494e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x80000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) 05:27:50 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)="00726964ff7a7e8000", 0x230) [ 565.129040] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 565.155294] netlink: 'syz-executor4': attribute type 1 has an invalid length. 05:27:50 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667303", 0x0, &(0x7f000000a000)) 05:27:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 05:27:51 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667398", 0x0, &(0x7f000000a000)) [ 565.427255] ima: OUT OF MEMORY ERROR creating queue entry [ 565.433274] audit: type=1804 audit(1543901270.925:85): pid=20746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=add_template_measure cause=ENOMEM comm="syz-executor0" name="/newroot/106/file0/bus" dev="ramfs" ino=76047 res=0 05:27:51 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/117, 0x75}], 0x1) 05:27:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 565.530446] audit: type=1804 audit(1543901270.925:86): pid=20746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/106/file0/bus" dev="ramfs" ino=76047 res=0 05:27:51 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667397", 0x0, &(0x7f000000a000)) 05:27:51 executing program 5: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56a9a707070f00884a26d000b180034a24579dbd1a7b153f13a2900bb8dacac76617d6b6e6823cf290fc8c03a9c631064eea98b6363ad899c6bdec5e936dd5545c9384dcdfbcc97b40ba93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3ab00a5c234d6fe370f", 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0xffffff6c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x15, 0x0, 0x0, "503a32982e4f5c6e2fd41d8ca7f9a346"}, 0x15, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) [ 565.892183] audit: type=1804 audit(1543901271.385:87): pid=20785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/107/file0/bus" dev="ramfs" ino=74975 res=1 05:27:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x400000000000000, 0x0) 05:27:51 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)="00726964ff7a7e8000", 0x230) [ 566.112941] audit: type=1804 audit(1543901271.605:88): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/108/file0/bus" dev="ramfs" ino=75013 res=1 [ 566.180198] audit: type=1804 audit(1543901271.605:89): pid=20804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/108/file0/bus" dev="ramfs" ino=75016 res=1 05:27:51 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:27:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7a00000000000000, 0x0) 05:27:51 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r0, 0x1000000000016) [ 566.406709] audit: type=1804 audit(1543901271.895:90): pid=20814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/109/file0/bus" dev="ramfs" ino=76132 res=1 05:27:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x600, 0x0) 05:27:51 executing program 4: [ 566.459361] audit: type=1804 audit(1543901271.925:91): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/109/file0/bus" dev="ramfs" ino=76135 res=1 05:27:52 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:27:52 executing program 4: [ 566.582489] audit: type=1804 audit(1543901272.065:92): pid=20827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/110/file0/bus" dev="ramfs" ino=75072 res=1 05:27:52 executing program 5: [ 566.636670] audit: type=1804 audit(1543901272.105:93): pid=20832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/110/file0/bus" dev="ramfs" ino=75081 res=1 05:27:52 executing program 4: 05:27:52 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4000000000000000, 0x0) [ 566.831347] audit: type=1804 audit(1543901272.325:94): pid=20844 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/111/file0/bus" dev="ramfs" ino=75112 res=1 [ 566.886201] audit: type=1804 audit(1543901272.355:95): pid=20845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/111/file0/bus" dev="ramfs" ino=75114 res=1 05:27:52 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)="00726964ff7a7e8000", 0x230) 05:27:52 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:27:52 executing program 4: 05:27:52 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') getdents(r0, &(0x7f0000000080)=""/4096, 0x1000) 05:27:52 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x300000000000000, 0x0) [ 567.013298] audit: type=1804 audit(1543901272.505:96): pid=20854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/112/file0/bus" dev="ramfs" ino=76266 res=1 05:27:52 executing program 4: 05:27:52 executing program 5: 05:27:52 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x6c000000, 0x0) 05:27:52 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:27:52 executing program 5: 05:27:52 executing program 4: [ 567.199746] audit: type=1804 audit(1543901272.695:97): pid=20873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/113/file0/bus" dev="ramfs" ino=75159 res=1 [ 567.273198] audit: type=1804 audit(1543901272.725:98): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/113/file0/bus" dev="ramfs" ino=76304 res=1 05:27:53 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) 05:27:53 executing program 5: 05:27:53 executing program 4: 05:27:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x700, 0x0) 05:27:53 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 05:27:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:53 executing program 5: 05:27:53 executing program 4: 05:27:53 executing program 5: 05:27:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x3f00000000000000, 0x0) 05:27:53 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673a8", 0x0, &(0x7f000000a000)) 05:27:53 executing program 4: 05:27:53 executing program 4: 05:27:53 executing program 5: 05:27:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x48000000, 0x0) 05:27:53 executing program 5: 05:27:54 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 05:27:54 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:54 executing program 4: 05:27:54 executing program 5: 05:27:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x74000000, 0x0) 05:27:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:54 executing program 4: 05:27:54 executing program 5: 05:27:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7a000000, 0x0) 05:27:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:54 executing program 4: 05:27:54 executing program 5: 05:27:55 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 05:27:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:55 executing program 5: 05:27:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x3f00, 0x0) 05:27:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0xa31, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @empty}, &(0x7f0000000040)=0xc) 05:27:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c125f85719070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x1}, 0x20) 05:27:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4c, 0x0) 05:27:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:27:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7400000000000000, 0x0) 05:27:55 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r2, 0x0, 0x0) tkill(r0, 0x1004000000016) 05:27:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:27:56 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7000000, 0x0) 05:27:56 executing program 4: ioprio_set$pid(0x2, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 05:27:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:27:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x5000000, 0x0) 05:27:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000011, &(0x7f0000000040)=0x1, 0x4) 05:27:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:27:58 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r2, 0x0, 0x0) tkill(r0, 0x1004000000016) 05:27:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x300, 0x0) 05:27:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:58 executing program 5: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) 05:27:58 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:27:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x600, 0x0) 05:27:59 executing program 5: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) 05:27:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x2, 0x0) [ 573.511938] kauditd_printk_skb: 18 callbacks suppressed [ 573.511952] audit: type=1804 audit(1543901279.005:117): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/124/file0/bus" dev="ramfs" ino=75660 res=1 05:27:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x600, 0x0) 05:27:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:27:59 executing program 5: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) [ 573.614216] audit: type=1804 audit(1543901279.015:118): pid=21063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/124/file0/bus" dev="ramfs" ino=76746 res=1 05:27:59 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) [ 573.697705] audit: type=1804 audit(1543901279.035:119): pid=21059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/newroot/571/file0/bus" dev="ramfs" ino=75663 res=1 [ 573.720310] audit: type=1804 audit(1543901279.155:120): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/newroot/572/file0/bus" dev="ramfs" ino=76770 res=1 05:28:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r2, 0x0, 0x0) tkill(r0, 0x1004000000016) 05:28:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x300, 0x0) 05:28:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xfffffff6, 0x0) 05:28:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:02 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:02 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667303", 0x0, &(0x7f000000a000)) 05:28:02 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) [ 576.563448] audit: type=1804 audit(1543901282.055:121): pid=21095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/newroot/573/file0/bus" dev="ramfs" ino=76830 res=1 05:28:02 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9dae, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x5, @loopback, 0x2e7}}, 0x4000000000000, 0x10001, 0x0, 0x703a7212}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x1000}, &(0x7f00000001c0)=0x8) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, &(0x7f0000000000)=0xffffffffffffff0f) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0x533, 0x6, 0xfff, 0xdd, 0x100000000, 0x8, 0xffffffffffffff23, 0x8, 0x1, 0x1}) 05:28:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xfeffffff00000000, 0x0) 05:28:02 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) 05:28:02 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673e0", 0x0, &(0x7f000000a000)) [ 576.818178] audit: type=1804 audit(1543901282.315:122): pid=21123 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/127/file0/bus" dev="ramfs" ino=76877 res=1 [ 576.850320] audit: type=1804 audit(1543901282.315:123): pid=21127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/127/file0/bus" dev="ramfs" ino=76879 res=1 05:28:05 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:05 executing program 4: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(r0, 0x200) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x400, 0x0) fdatasync(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x4, 0xfffffffffffffc00, 0x81, 0x0, 0x11}) sendfile(r3, r3, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000440)='/dev/snapshot\x00', 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) pipe2(&(0x7f0000000140), 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8, 0x31) 05:28:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:05 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) 05:28:05 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xa00, 0x0) 05:28:05 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:05 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) [ 579.613014] audit: type=1804 audit(1543901285.105:124): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/128/file0/bus" dev="ramfs" ino=76907 res=1 05:28:05 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x6, 0x0) 05:28:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) [ 579.675286] audit: type=1804 audit(1543901285.135:125): pid=21143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/128/file0/bus" dev="ramfs" ino=76922 res=1 05:28:05 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:05 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:06 executing program 4: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(r0, 0x200) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x400, 0x0) fdatasync(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x4, 0xfffffffffffffc00, 0x81, 0x0, 0x11}) sendfile(r3, r3, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000440)='/dev/snapshot\x00', 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) pipe2(&(0x7f0000000140), 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8, 0x31) 05:28:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4, 0x0) 05:28:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:06 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c00, 0x0) 05:28:06 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c02, 0x0) [ 580.568038] audit: type=1804 audit(1543901286.065:126): pid=21185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/130/file0/bus" dev="ramfs" ino=78025 res=1 05:28:06 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x3000000, 0x0) 05:28:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000540), 0x8000fffffffe) [ 580.641770] audit: type=1804 audit(1543901286.105:127): pid=21190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/130/file0/bus" dev="ramfs" ino=78028 res=1 05:28:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x2, 0x0) [ 580.763482] audit: type=1804 audit(1543901286.255:128): pid=21201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/131/file0/bus" dev="ramfs" ino=77042 res=1 05:28:06 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 580.838725] audit: type=1804 audit(1543901286.285:129): pid=21202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/131/file0/bus" dev="ramfs" ino=78053 res=1 05:28:06 executing program 4: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(r0, 0x200) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x400, 0x0) fdatasync(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x4, 0xfffffffffffffc00, 0x81, 0x0, 0x11}) sendfile(r3, r3, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000440)='/dev/snapshot\x00', 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) pipe2(&(0x7f0000000140), 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x8, 0x31) 05:28:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1262, 0x0) 05:28:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000540), 0x8000fffffffe) 05:28:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7400, 0x0) 05:28:06 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:06 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667301", 0x0, &(0x7f000000a000)) 05:28:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127e, 0x0) 05:28:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000540), 0x8000fffffffe) 05:28:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4c00, 0x0) 05:28:07 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e66738f", 0x0, &(0x7f000000a000)) 05:28:07 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127b, 0x0) 05:28:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x4, 0x7, "a60772703ec73d747562418e5da30bd5"}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x10001, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) 05:28:07 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7a, 0x0) 05:28:07 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673fc", 0x0, &(0x7f000000a000)) 05:28:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1267, 0x0) 05:28:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1268, 0x0) 05:28:08 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x48, 0x0) 05:28:08 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x4, 0x7, "a60772703ec73d747562418e5da30bd5"}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x10001, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) 05:28:08 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 582.621608] audit: type=1804 audit(1543901288.115:130): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/135/file0/bus" dev="ramfs" ino=77214 res=1 05:28:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127c, 0x0) [ 582.689104] audit: type=1804 audit(1543901288.145:131): pid=21292 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/135/file0/bus" dev="ramfs" ino=77215 res=1 05:28:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x4, 0x7, "a60772703ec73d747562418e5da30bd5"}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x10001, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) 05:28:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x1000000, 0x0) 05:28:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c08, 0x0) 05:28:08 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 582.843964] audit: type=1804 audit(1543901288.335:132): pid=21306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/136/file0/bus" dev="ramfs" ino=78326 res=1 [ 582.928253] audit: type=1804 audit(1543901288.335:133): pid=21308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/136/file0/bus" dev="ramfs" ino=78328 res=1 05:28:08 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x4, 0x7, "a60772703ec73d747562418e5da30bd5"}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x10001, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) 05:28:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x2000000, 0x0) 05:28:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x402c5828, 0x0) 05:28:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:08 executing program 3: r0 = gettid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c06, 0x0) 05:28:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x4, 0x7, "a60772703ec73d747562418e5da30bd5"}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x10001, 0x4) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x0) 05:28:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x6800, 0x0) 05:28:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1277, 0x0) 05:28:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x4, 0x7, "a60772703ec73d747562418e5da30bd5"}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x10001, 0x4) 05:28:09 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xa, 0x0) 05:28:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c09, 0x0) 05:28:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x4, 0x7, "a60772703ec73d747562418e5da30bd5"}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:11 executing program 3: r0 = gettid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0xc0189436, 0x0) 05:28:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x3, 0x0) 05:28:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:11 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs0', 0x0, &(0x7f000000a000)) 05:28:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1269, 0x0) 05:28:12 executing program 4: ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) [ 586.496383] kauditd_printk_skb: 2 callbacks suppressed [ 586.496398] audit: type=1804 audit(1543901291.985:136): pid=21378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/140/file0/bus" dev="ramfs" ino=78520 res=1 05:28:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xfeffffff, 0x0) [ 586.593745] audit: type=1804 audit(1543901292.025:137): pid=21388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/140/file0/bus" dev="ramfs" ino=77436 res=1 05:28:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:12 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e66739c", 0x0, &(0x7f000000a000)) 05:28:12 executing program 4: ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:15 executing program 3: r0 = gettid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x40041271, 0x0) 05:28:15 executing program 4: ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4800, 0x0) 05:28:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:15 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\b', 0x0, &(0x7f000000a000)) 05:28:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x541b, 0x0) 05:28:15 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xa00000000000000, 0x0) 05:28:15 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667318", 0x0, &(0x7f000000a000)) 05:28:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127d, 0x0) [ 589.752480] audit: type=1804 audit(1543901295.245:138): pid=21443 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/143/file0/bus" dev="ramfs" ino=78654 res=1 [ 589.822990] audit: type=1804 audit(1543901295.275:139): pid=21444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/143/file0/bus" dev="ramfs" ino=78661 res=1 05:28:18 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1004000000016) 05:28:18 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c01, 0x0) 05:28:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4c000000, 0x0) 05:28:18 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5452, 0x0) 05:28:18 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x6c00, 0x0) [ 592.694739] audit: type=1804 audit(1543901298.185:140): pid=21467 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/144/file0/bus" dev="ramfs" ino=78720 res=1 05:28:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1264, 0x0) 05:28:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xf6ffffff00000000, 0x0) [ 592.900156] audit: type=1804 audit(1543901298.395:141): pid=21488 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/146/file0/bus" dev="ramfs" ino=77651 res=1 [ 592.928603] audit: type=1804 audit(1543901298.425:142): pid=21492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/146/file0/bus" dev="ramfs" ino=78792 res=1 05:28:18 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1004000000016) 05:28:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x40049409, 0x0) 05:28:19 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667303", 0x0, &(0x7f000000a000)) 05:28:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x20000000, 0x0) 05:28:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0xc020660b, 0x0) 05:28:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) [ 593.608934] audit: type=1804 audit(1543901299.105:143): pid=21507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/147/file0/bus" dev="ramfs" ino=77682 res=1 05:28:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5460, 0x0) 05:28:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xa000000, 0x0) [ 593.680093] audit: type=1804 audit(1543901299.135:144): pid=21513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/147/file0/bus" dev="ramfs" ino=77691 res=1 05:28:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) [ 593.789205] audit: type=1804 audit(1543901299.285:145): pid=21528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/148/file0/bus" dev="ramfs" ino=77726 res=1 [ 593.854357] audit: type=1804 audit(1543901299.325:146): pid=21531 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/148/file0/bus" dev="ramfs" ino=77730 res=1 05:28:19 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) 05:28:19 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1004000000016) 05:28:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x80041272, 0x0) 05:28:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x74, 0x0) 05:28:19 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:19 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) [ 594.390273] audit: type=1804 audit(1543901299.885:147): pid=21542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/149/file0/bus" dev="ramfs" ino=77766 res=1 05:28:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c07, 0x0) 05:28:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x700000000000000, 0x0) [ 594.450064] audit: type=1804 audit(1543901299.905:148): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/149/file0/bus" dev="ramfs" ino=77771 res=1 05:28:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:20 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:20 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 05:28:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1278, 0x0) [ 594.622688] audit: type=1804 audit(1543901300.105:149): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/150/file0/bus" dev="ramfs" ino=78965 res=1 05:28:20 executing program 3: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x40000000, 0x0) 05:28:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1276, 0x0) 05:28:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 05:28:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 05:28:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1261, 0x0) 05:28:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4000, 0x0) 05:28:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, 0x0) 05:28:20 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673d0", 0x0, &(0x7f000000a000)) 05:28:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1265, 0x0) 05:28:20 executing program 3: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r3, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1263, 0x0) 05:28:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, 0x0) 05:28:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7a00, 0x0) 05:28:21 executing program 3: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x125f, 0x0) 05:28:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r3, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, 0x0) 05:28:21 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x6c, 0x0) 05:28:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x402c582a, 0x0) 05:28:21 executing program 4: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:21 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r3, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c03, 0x0) 05:28:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x100000000000000, 0x0) 05:28:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x700000000000000, 0x0) 05:28:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x80041270, 0x0) 05:28:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:22 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xffffff7f00000000, 0x0) 05:28:22 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1274, 0x0) [ 596.673280] FAULT_INJECTION: forcing a failure. [ 596.673280] name failslab, interval 1, probability 0, space 0, times 0 [ 596.686280] CPU: 0 PID: 21690 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #265 [ 596.693673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.703064] Call Trace: [ 596.705693] dump_stack+0x244/0x39d [ 596.709363] ? dump_stack_print_info.cold.1+0x20/0x20 [ 596.709394] ? debug_smp_processor_id+0x1c/0x20 [ 596.719251] ? perf_trace_lock+0x14d/0x7a0 [ 596.719276] should_fail.cold.4+0xa/0x17 [ 596.719299] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 596.719324] ? perf_trace_lock+0x14d/0x7a0 [ 596.719343] ? _parse_integer+0x180/0x180 [ 596.741123] ? lock_is_held_type+0x210/0x210 [ 596.745562] ? find_held_lock+0x36/0x1c0 [ 596.749731] ? hash_netnet6_uadt+0x138/0xf90 [ 596.754177] ? perf_trace_sched_process_exec+0x860/0x860 [ 596.759694] ? drm_unbind_agp+0x20/0x20 [ 596.763683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.769250] __should_failslab+0x124/0x180 [ 596.773498] should_failslab+0x9/0x14 [ 596.777305] __kmalloc+0x2e0/0x760 [ 596.780852] ? find_held_lock+0x36/0x1c0 [ 596.784926] ? drm_ioctl+0x48d/0xb00 [ 596.788646] drm_ioctl+0x48d/0xb00 [ 596.792220] ? drm_mode_cursor2_ioctl+0x30/0x30 [ 596.796911] ? wait_for_completion+0x8a0/0x8a0 [ 596.801505] ? drm_ioctl_kernel+0x330/0x330 [ 596.805850] ? __fget_light+0x2e9/0x430 [ 596.809845] ? fget_raw+0x20/0x20 [ 596.813309] ? __sb_end_write+0xd9/0x110 [ 596.817386] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 596.822921] ? fput+0x130/0x1a0 [ 596.826208] ? do_fast_syscall_32+0x150/0xfb2 [ 596.830749] drm_compat_ioctl+0x249/0x320 [ 596.834910] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 596.840122] ? compat_drm_setunique+0x10/0x10 [ 596.844618] __ia32_compat_sys_ioctl+0x20e/0x630 [ 596.849392] do_fast_syscall_32+0x34d/0xfb2 [ 596.853727] ? do_int80_syscall_32+0x890/0x890 [ 596.858324] ? entry_SYSENTER_compat+0x68/0x7f [ 596.862961] ? trace_hardirqs_off_caller+0xbb/0x310 [ 596.867986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.872829] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.877677] ? trace_hardirqs_on_caller+0x310/0x310 [ 596.882726] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 596.887750] ? prepare_exit_to_usermode+0x291/0x3b0 [ 596.892774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.897630] entry_SYSENTER_compat+0x70/0x7f [ 596.902050] RIP: 0023:0xf7fcaa29 [ 596.905452] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 596.924371] RSP: 002b:00000000f5fc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 596.932083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000ffffffb0 [ 596.939384] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.946668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.953970] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 596.961239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:28:24 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127f, 0x0) 05:28:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x3f000000, 0x0) 05:28:24 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:24 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667303", 0x0, &(0x7f000000a000)) [ 599.006281] FAULT_INJECTION: forcing a failure. [ 599.006281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 599.018141] CPU: 0 PID: 21703 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #265 [ 599.025528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.029894] kauditd_printk_skb: 9 callbacks suppressed [ 599.029908] audit: type=1804 audit(1543901304.525:159): pid=21709 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/157/file0/bus" dev="ramfs" ino=80245 res=1 [ 599.034912] Call Trace: [ 599.034941] dump_stack+0x244/0x39d [ 599.034967] ? dump_stack_print_info.cold.1+0x20/0x20 [ 599.034994] ? print_usage_bug+0xc0/0xc0 [ 599.035037] should_fail.cold.4+0xa/0x17 [ 599.046999] audit: type=1804 audit(1543901304.535:160): pid=21710 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/157/file0/bus" dev="ramfs" ino=80247 res=1 [ 599.061058] ? fault_create_debugfs_attr+0x1f0/0x1f0 05:28:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x1000000000000, 0x0) 05:28:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1260, 0x0) [ 599.061097] ? mark_held_locks+0x130/0x130 [ 599.061117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.061151] ? check_preemption_disabled+0x48/0x280 [ 599.061177] ? mark_held_locks+0x130/0x130 [ 599.061198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.131058] ? check_preemption_disabled+0x48/0x280 [ 599.136097] ? debug_smp_processor_id+0x1c/0x20 [ 599.140781] ? perf_trace_lock+0x14d/0x7a0 [ 599.145026] ? lock_is_held_type+0x210/0x210 [ 599.149474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 05:28:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x125e, 0x0) [ 599.155050] ? should_fail+0x22d/0xd01 [ 599.158956] ? lock_is_held_type+0x210/0x210 [ 599.163380] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 599.168495] ? perf_trace_lock+0x14d/0x7a0 [ 599.172759] __alloc_pages_nodemask+0x366/0xea0 [ 599.177460] ? lock_is_held_type+0x210/0x210 [ 599.177483] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 599.177509] ? find_held_lock+0x36/0x1c0 [ 599.177551] ? trace_hardirqs_off+0xb8/0x310 [ 599.187099] cache_grow_begin+0xa5/0x8c0 [ 599.187117] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 05:28:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5421, 0x0) [ 599.187135] ? check_preemption_disabled+0x48/0x280 [ 599.187158] __kmalloc+0x69e/0x760 [ 599.187176] ? find_held_lock+0x36/0x1c0 [ 599.217810] ? drm_ioctl+0x48d/0xb00 [ 599.221541] drm_ioctl+0x48d/0xb00 [ 599.225093] ? drm_mode_cursor2_ioctl+0x30/0x30 [ 599.229801] ? wait_for_completion+0x8a0/0x8a0 [ 599.234430] ? drm_ioctl_kernel+0x330/0x330 [ 599.238773] ? __fget_light+0x2e9/0x430 [ 599.242760] ? fget_raw+0x20/0x20 [ 599.246233] ? __sb_end_write+0xd9/0x110 [ 599.250312] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 05:28:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127a, 0x0) [ 599.255871] ? fput+0x130/0x1a0 [ 599.259164] ? do_fast_syscall_32+0x150/0xfb2 [ 599.263681] drm_compat_ioctl+0x249/0x320 [ 599.267842] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 599.273082] ? compat_drm_setunique+0x10/0x10 [ 599.277602] __ia32_compat_sys_ioctl+0x20e/0x630 [ 599.282429] do_fast_syscall_32+0x34d/0xfb2 [ 599.286764] ? do_int80_syscall_32+0x890/0x890 [ 599.291360] ? entry_SYSENTER_compat+0x68/0x7f [ 599.295965] ? trace_hardirqs_off_caller+0xbb/0x310 [ 599.300991] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 599.305842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 599.310695] ? trace_hardirqs_on_caller+0x310/0x310 [ 599.315725] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 599.320750] ? prepare_exit_to_usermode+0x291/0x3b0 [ 599.325785] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 599.330643] entry_SYSENTER_compat+0x70/0x7f [ 599.335064] RIP: 0023:0xf7fcaa29 [ 599.338452] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 05:28:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c04, 0x0) [ 599.357406] RSP: 002b:00000000f5fc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 599.365119] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000ffffffb0 [ 599.372405] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.372415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.372424] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 599.372433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.505086] audit: type=1804 audit(1543901304.995:161): pid=21733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/158/file0/bus" dev="ramfs" ino=79275 res=1 [ 599.539192] audit: type=1804 audit(1543901305.035:162): pid=21734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/158/file0/bus" dev="ramfs" ino=79283 res=1 05:28:27 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:27 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667311", 0x0, &(0x7f000000a000)) 05:28:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0xc0401273, 0x0) 05:28:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xffffffff00000000, 0x0) [ 602.159664] audit: type=1804 audit(1543901307.655:163): pid=21739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/159/file0/bus" dev="ramfs" ino=79323 res=1 05:28:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4000000, 0x0) 05:28:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) [ 602.212149] audit: type=1804 audit(1543901307.655:164): pid=21749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/159/file0/bus" dev="ramfs" ino=79325 res=1 05:28:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00005452, &(0x7f0000000140)) 05:28:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) [ 602.381017] audit: type=1804 audit(1543901307.875:165): pid=21762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/160/file0/bus" dev="ramfs" ino=79366 res=1 05:28:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x68000000, 0x0) 05:28:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffc0189436, &(0x7f0000000140)) [ 602.429440] IPVS: ftp: loaded support on port[0] = 21 [ 602.433888] audit: type=1804 audit(1543901307.885:166): pid=21764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/160/file0/bus" dev="ramfs" ino=79369 res=1 [ 602.549652] audit: type=1804 audit(1543901308.045:167): pid=21775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/161/file0/bus" dev="ramfs" ino=79420 res=1 [ 602.594215] audit: type=1804 audit(1543901308.075:168): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/161/file0/bus" dev="ramfs" ino=79423 res=1 [ 603.102778] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.109575] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.116535] device bridge_slave_0 entered promiscuous mode [ 603.148698] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.155173] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.162793] device bridge_slave_1 entered promiscuous mode [ 603.201691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 603.232098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 603.318520] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 603.352031] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 603.486706] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 603.494001] team0: Port device team_slave_0 added [ 603.527858] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 603.534967] team0: Port device team_slave_1 added [ 603.565396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 603.598176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 603.630447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 603.663909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 603.955449] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.961843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.968681] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.975026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.041452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.145301] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 05:28:30 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(0xffffffffffffffff, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00000002, &(0x7f0000000140)) [ 605.325764] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 605.332641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 605.341294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.441395] 8021q: adding VLAN 0 to HW filter on device team0 05:28:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5450, 0x0) 05:28:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x6000000, 0x0) 05:28:31 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfsH', 0x0, &(0x7f000000a000)) 05:28:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00005421, &(0x7f0000000140)) 05:28:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(0xffffffffffffffff, r6, &(0x7f0000000540), 0x8000fffffffe) [ 606.102681] audit: type=1804 audit(1543901311.595:169): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/162/file0/bus" dev="ramfs" ino=79523 res=1 05:28:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xf6ffffff, 0x0) 05:28:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff40049409, &(0x7f0000000140)) 05:28:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x125d, 0x0) 05:28:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(0xffffffffffffffff, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:33 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:33 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb8, &(0x7f0000000140)) 05:28:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1279, 0x0) 05:28:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = dup(0xffffffffffffffff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x2000, 0x0) 05:28:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00005460, &(0x7f0000000140)) [ 608.309616] audit: type=1804 audit(1543901313.805:170): pid=22082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/164/file0/bus" dev="ramfs" ino=80673 res=1 05:28:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x301, 0x0) 05:28:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = dup(0xffffffffffffffff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x5, 0x0) [ 608.366683] audit: type=1804 audit(1543901313.825:171): pid=22088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/164/file0/bus" dev="ramfs" ino=79619 res=1 05:28:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff402c582a, &(0x7f0000000140)) 05:28:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4020940d, 0x0) 05:28:36 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:36 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x2000000000000000, 0x0) 05:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00005450, &(0x7f0000000140)) 05:28:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = dup(0xffffffffffffffff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000008, 0x100013, r0, 0x0) 05:28:36 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667303", 0x0, &(0x7f000000a000)) 05:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff0000541b, &(0x7f0000000140)) [ 611.384506] audit: type=1804 audit(1543901316.875:172): pid=22121 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/166/file0/bus" dev="ramfs" ino=80759 res=1 05:28:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) socket$unix(0x1, 0x5, 0x0) 05:28:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) [ 611.450668] audit: type=1804 audit(1543901316.915:173): pid=22128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/166/file0/bus" dev="ramfs" ino=80767 res=1 05:28:37 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x6800000000000000, 0x0) 05:28:37 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4100, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x1785}, 0x4) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) [ 611.596758] audit: type=1804 audit(1543901317.085:174): pid=22144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/167/file0/bus" dev="ramfs" ino=80809 res=1 05:28:39 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff4020940d, &(0x7f0000000140)) 05:28:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x200000000000000, 0x0) 05:28:39 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000ffb000/0x1000)=nil}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) 05:28:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:39 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff402c5828, &(0x7f0000000140)) [ 614.474632] audit: type=1804 audit(1543901319.965:175): pid=22165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/168/file0/bus" dev="ramfs" ino=80864 res=1 05:28:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffc020660b, &(0x7f0000000140)) 05:28:40 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x500, 0x0) [ 614.554040] audit: type=1804 audit(1543901320.005:176): pid=22169 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/168/file0/bus" dev="ramfs" ino=80865 res=1 05:28:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101) 05:28:40 executing program 5: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x0) 05:28:40 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc9, &(0x7f0000000140)) [ 614.726163] audit: type=1804 audit(1543901320.215:177): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/169/file0/bus" dev="ramfs" ino=80896 res=1 05:28:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) [ 614.807275] audit: type=1804 audit(1543901320.245:178): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/169/file0/bus" dev="ramfs" ino=79858 res=1 05:28:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xfffffffe, 0x0) 05:28:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000280)=""/54, 0x36}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/135, 0x87}, {&(0x7f0000001380)=""/87, 0x57}, {&(0x7f0000001400)=""/60, 0x3c}, {&(0x7f0000001440)=""/209, 0xd1}], 0x9, &(0x7f00000015c0)=""/61, 0x3d, 0xb}, 0x100000000}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/240, 0xf0}], 0x3, 0x0, 0x0, 0x100000000000}, 0x8000}, {{&(0x7f0000001800)=@nfc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001880)=""/153, 0x99}, {&(0x7f0000001940)=""/141, 0x8d}, {&(0x7f0000001a00)=""/250, 0xfa}, {&(0x7f0000001b00)=""/219, 0xdb}, {&(0x7f0000001c00)=""/242, 0xf2}], 0x5, &(0x7f0000001d40)=""/105, 0x69, 0xfb}, 0xffffffffffffffff}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000003340)=[{&(0x7f0000001e40)=""/194, 0xc2}, {&(0x7f0000001f40)=""/226, 0xe2}, {&(0x7f0000002040)=""/238, 0xee}, {&(0x7f0000002140)=""/94, 0x5e}, {&(0x7f00000021c0)=""/53, 0x35}, {&(0x7f0000002200)=""/199, 0xc7}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/47, 0x2f}], 0x8, &(0x7f0000003380)=""/159, 0x9f, 0x3f}, 0x9}, {{&(0x7f0000003440)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003740)=[{&(0x7f00000034c0)=""/13, 0xd}, {&(0x7f0000003500)=""/232, 0xe8}, {&(0x7f0000003600)=""/16, 0x10}, {&(0x7f0000003640)=""/217, 0xd9}], 0x4, &(0x7f0000003780)=""/146, 0x92, 0x5}, 0xffffffff}, {{&(0x7f0000003840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000048c0)=[{&(0x7f00000038c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004900)=""/37, 0x25, 0x1}, 0x48000000000}, {{&(0x7f0000004940)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/153, 0x99}], 0x1, &(0x7f0000004ac0)=""/108, 0x6c, 0x7}, 0x80000000}, {{&(0x7f0000004b40)=@generic, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)=""/63, 0x3f}], 0x1, &(0x7f0000004c40)=""/4096, 0x1000, 0x100000001}, 0x1}], 0x8, 0x1, &(0x7f0000005d40)={0x77359400}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000005d80)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x2}}, [0x400, 0x100000001, 0x7, 0x10001, 0x1000, 0x7, 0xffc00000, 0x5, 0x8, 0xcb0, 0x8000, 0xfff, 0x2, 0x6, 0x9]}, &(0x7f0000005e80)=0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000005ec0)={r2, 0x1}, 0x8) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:40 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:40 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4c00000000000000, 0x0) 05:28:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = dup3(r0, r0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc044565d, &(0x7f0000000040)={0x5, 0x4, 0x4, 0xe000, {r2, r3/1000+30000}, {0x3, 0x2, 0x3769, 0x8, 0xd5, 0x1, "8fd767be"}, 0x856, 0x3, @offset=0x10001, 0x4}) 05:28:40 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 615.354694] audit: type=1804 audit(1543901320.845:179): pid=22212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/171/file0/bus" dev="ramfs" ino=81972 res=1 05:28:40 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffad, &(0x7f0000000140)) [ 615.415685] audit: type=1804 audit(1543901320.885:180): pid=22221 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/171/file0/bus" dev="ramfs" ino=81985 res=1 05:28:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:41 executing program 5: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x6, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:41 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x600000000000000, 0x0) 05:28:41 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:41 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@local, @dev={0xac, 0x14, 0x14, 0x20}}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @empty}, {0x0, @random="19da0455537d"}, 0x0, {0x2, 0x4e22, @empty}, 'veth0_to_bridge\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0x7, 0x8) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'veth0_to_bridge\x00', 0x3}, 0x18) [ 615.696107] audit: type=1804 audit(1543901321.185:181): pid=22243 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/172/file0/bus" dev="ramfs" ino=82056 res=1 05:28:41 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) epoll_create(0x35d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x1, 0xff, 0x8, 0xfff, 0x0, 0xe327}, &(0x7f0000000080)=0x20) 05:28:41 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:41 executing program 4: ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:41 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4800000000000000, 0x0) 05:28:41 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x1, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x401, 0x10040) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200480, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x1, 0x1, 0x0, 0x3, 0x8}, 0x8, 0xfffffffffffffffc, 0x7}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:41 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0xffffff7f, 0x0) 05:28:41 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) [ 616.941414] device bridge_slave_1 left promiscuous mode [ 616.947019] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.956105] device bridge_slave_0 left promiscuous mode [ 616.961852] bridge0: port 1(bridge_slave_0) entered disabled state 05:28:42 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x44000, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc044565d, &(0x7f0000000040)={0x0, 0x8, 0x4, 0xc0000010, {0x77359400}, {0x4, 0x8, 0xffff, 0x7, 0x3d09, 0x7, "c627a2df"}, 0x80000001, 0x1, @fd, 0x4}) bind(r1, &(0x7f0000000080)=@generic={0x1, "3f8a92a64a4452de64c40cff6166f69359fe539aa15fcbe565632cf92aa75e3cca890c4ced9d45b850862e5b5a12f4d973d589c33e2b02e9b5ebe8187718cdb21b8e55220b3a0b5b168993ca31eac430c2e2df1e3c492e5117ed8f40bb5ab2d06602803c32f51ca40f283857ab2469f253b6f82406a36798cafbd4a07a8a"}, 0x80) 05:28:42 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:42 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7, 0x0) 05:28:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x800000004, &(0x7f0000000140)) r1 = dup2(r0, r0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 05:28:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000080)={{0x2, 0x4e22, @empty}, {0x307, @broadcast}, 0x0, {0x2, 0x4e20, @remote}, 'irlan0\x00'}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000100)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000003c0)) ioctl(r0, 0x4, &(0x7f0000000240)="884321df4365746a53c2b52cbb330600660d6f6e42758a3ad0549ce292198cda72e6656f24cb200fbaad7bc18d6d52cc286dd85aeb3c0f7c8b21f37cd2a03468acde77fd025e8fc8e3af187d876fa1bff687532b0a2603cfff784ee349c2b62c49fa1ead7d615dfb6c2ab1bca85c4902003275514dc004a24eaf58b7f3b74cbfdea892ff35373a05152d3f9e3fc67aef1bb7a13cd84fc3cb8442ce24ce31c6a678c72dab629a48aaa3ec32872dbbd0f79b6ada59d4cc2417482868c7d20c0b238f1e55a5a540fe15371f42a9be7ad74df914a1631c3c031272d11e60426c927697b2bf9e46") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000340)=""/23, 0x17, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x3, @local, 0x2}, @in6={0xa, 0x4e24, 0x58b, @mcast2}], 0x38) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000200)) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000400), 0x4) [ 617.272479] kauditd_printk_skb: 2 callbacks suppressed [ 617.272492] audit: type=1804 audit(1543901322.765:184): pid=22301 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/175/file0/bus" dev="ramfs" ino=82210 res=1 05:28:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x200004, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xdc3, 0x0, 0x0, 0x1f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0xbb7f, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)={0xfffffffffffffdb4, 0x22, 0x1, 0x70bd2c, 0x0, {0x16}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000bb85d78baddfb4d0746fe3b025c57dc300e866f1cfabb6d1c7b1bc2751ce55e839003643ae57c0a64f6ca0ed8dd2063a03efa91391410c409e23118b6b795382dfca4605cdab41aa305250734471140a34b306f795f63208ff"]) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000002c0)={0x0, 0x1, 0x401, {}, 0xe1, 0x9}) [ 617.350462] audit: type=1804 audit(1543901322.825:185): pid=22310 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/175/file0/bus" dev="ramfs" ino=82213 res=1 05:28:42 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:42 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x68, 0x0) [ 617.499146] audit: type=1804 audit(1543901322.995:186): pid=22324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/176/file0/bus" dev="ramfs" ino=81190 res=1 05:28:43 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 617.555755] audit: type=1804 audit(1543901322.995:187): pid=22327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/176/file0/bus" dev="ramfs" ino=81192 res=1 05:28:43 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:43 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x6c00000000000000, 0x0) 05:28:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', '/dev/loop#\x00'}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:43 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 618.208972] audit: type=1804 audit(1543901323.705:188): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/177/file0/bus" dev="ramfs" ino=81257 res=1 05:28:43 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 618.264042] audit: type=1804 audit(1543901323.725:189): pid=22345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/177/file0/bus" dev="ramfs" ino=81272 res=1 05:28:43 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x6, 0x7f, 0x100000000, 0xc5, 0x7ff}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb0, &(0x7f00000000c0)="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") 05:28:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x500000000000000, 0x0) 05:28:43 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0xfffffffffffffffd) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) [ 618.397695] audit: type=1804 audit(1543901323.885:190): pid=22358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/178/file0/bus" dev="ramfs" ino=81298 res=1 05:28:43 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 618.461169] audit: type=1804 audit(1543901323.895:191): pid=22363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/178/file0/bus" dev="ramfs" ino=81304 res=1 05:28:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x7, 0x5) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) ioprio_set$uid(0x3, r1, 0x3) 05:28:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000003c0400000000000048010000480100004801000048010000a8030000a8030000a8030000a8030000a803000003000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec00480100000000000000000000000000000000000000000000000030006463637000000000000000000000000000000000000000000000000000004e224e214e224e2405000d0002000200240074746c000000000000000000000000000000000000000000000000000000033f00005c00434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaaaa000002000c000d0009002b003600050005003100020004003a0021001e003e003c003b000000020000002107000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002600200000000000000000000000000000000000000000000000044017363747000000000000000000000000000000000000000000000000000004e224e204e234e22020000000400000005000000000000003f0000000600000003000000ff0000000600000001000000a80b00009e30000001fcffff01ffffff00100000bc0a000007000000010000000200000007000000fbffffff080000004300000027ee00000104000008000000c5800000b60000007c0c00000300000005000000ff070000000800007f0000000edf000001010000fdffffff0400000005000000070000000600000000000000ec0c00000700000001000080070000000200000003000000801a1a0004000000826b00000008000007000000d71b0000090000000300000007000000060000000700000005000000ff7f00000900000004000000010400000000000008010303409006cdff0805050400000000000000010000002400727066696c7465720000000000000000000000000000000000000000000006000000600043540000000000000000000000000000000000000000000000000000000212000300e7770000040000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000940000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x498) 05:28:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x2000000000000000) 05:28:44 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667304", 0x0, &(0x7f000000a000)) 05:28:44 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x840, 0x0) 05:28:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) [ 619.127755] audit: type=1804 audit(1543901324.625:192): pid=22389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/179/file0/bus" dev="ramfs" ino=81390 res=1 05:28:44 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:44 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x200, 0x0) 05:28:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x2400) write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0x10, 0xfffffffffffffff5, 0x2}, 0x10) ioctl(r0, 0x101, &(0x7f0000000080)="863398b933ff033276987d0000144d327126d4cd866118cbb1f6887d4d3f7a1dbb6f5a04e450700ce2287255ea864804eda4ae05d090c0956a3370e13f2df23b915780ebb7a3a36f58180054ba3fbb5de645efe6c181e5026714") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 05:28:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x300) [ 619.207520] audit: type=1804 audit(1543901324.655:193): pid=22395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/179/file0/bus" dev="ramfs" ino=82351 res=1 05:28:44 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:44 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673b6", 0x0, &(0x7f000000a000)) 05:28:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffe, 0x1) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xa00) 05:28:44 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000001c0)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000000540), 0x8000fffffffe) 05:28:45 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000140)={0x9, &(0x7f0000000100)=[{0x2400000000, 0x5}, {0x9, 0x8}, {0xff}, {0x9, 0x1}, {0x7, 0xf}, {0xfff, 0x5}, {0x1200000000000000, 0x80}, {0x9, 0x20}, {0x7e80000000000000, 0xfffffffffffffffb}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x1000000b}) 05:28:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x498f64da, 0xad4, 0x7fffffff, 0x400}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 05:28:45 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x48) 05:28:45 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000001c0)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000000540), 0x8000fffffffe) 05:28:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0xfffffffffffffffd) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1cf2, 0x12000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/146) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0xf) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2, 0xf1}, &(0x7f0000000200)=0x8) 05:28:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ftruncate(r0, 0x27a) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) 05:28:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xf6ffffff00000000) 05:28:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000001c0)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000000540), 0x8000fffffffe) 05:28:45 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:45 executing program 4: r0 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in=@local}}, {{@in6=@dev}}}, &(0x7f0000000140)=0xe8) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x20000004) socketpair(0x0, 0xb, 0x9d2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev, @loopback}, &(0x7f0000000080)=0xc) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x700000000000000) 05:28:46 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:28:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xdc, 0x140) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000001c0)=0xe8) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x30e) 05:28:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:46 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x3f00000000000000) 05:28:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) fsync(r1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) prctl$PR_CAPBSET_READ(0x17, 0xf) write$input_event(r0, &(0x7f00000001c0)={{}, 0x15, 0x9f, 0x3}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000080)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:46 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x600000000000000) 05:28:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0xfffffffffffffffd) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0186404, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0xad, 0x4, 0x2, &(0x7f0000ffc000/0x3000)=nil, 0x20}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000080)="9d534f05cb2754ccddad153a0fbf78622391dbb91e4f5ecfdacd78650fd18c50c578128bd0b1ecde25a1c772aa7d787684385f48062a7880d463520d4bf7") 05:28:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1004000000016) 05:28:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:46 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x7400000000000000) 05:28:47 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = dup(r0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)) 05:28:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x2040) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1935, 0x4000) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000180)={{0x0, @name="faf1e7d3440dc65e719662923d92317dac9ba1266cc2adeb40c9a79208e9487b"}, 0x8, 0xc00000, 0x8}) 05:28:47 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xfeffffff) 05:28:47 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r3, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:47 executing program 4: pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x802) mq_timedsend(r0, &(0x7f0000000080)="00c35b6ccb89db87c13258d4315e2da0885541c33a7e2e9f4f9cf15847dc4130aa259470d1abde6de16e81e8931266b809b10d80371cd2577fc6da986b47d38697f043ce8c9c0c31b41ec1423b4c00e33dadb279436090859adaf76212d60f0e716556df19acaa22751a4fdc5c90237b063d7102aed2bd0f885f6b909e4c706e6163098660cf258ad57cfac697223570d5ff54a3af5b3278", 0x98, 0x8, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x3) 05:28:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) [ 621.934043] team0 (unregistering): Port device team_slave_1 removed [ 621.945172] team0 (unregistering): Port device team_slave_0 removed [ 621.956024] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 621.968194] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 621.998549] bond0 (unregistering): Released all slaves 05:28:49 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1004000000016) 05:28:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20200, 0x0) 05:28:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x401) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/252) write(r0, &(0x7f0000000000)="b87131aed0761a470876bc0c032907187f0d35830b69189396054798a6c744c91dd492c6e7253a04d6cfb3455c98369463a90d3d6b5b73ac889c84d25b28d3229ad0b9f945356a7068575b", 0x4b) 05:28:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r3, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xa00000000000000) 05:28:49 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x100000000000000) 05:28:49 executing program 4: r0 = socket(0x5, 0x800, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) 05:28:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000040)) r2 = fcntl$getown(r1, 0x9) r3 = geteuid() getgroups(0x2, &(0x7f0000001680)=[0xee01, 0xffffffffffffffff]) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)="fcb8ee81b74e3545a507ba991fd810646f44faabd7f56a26cf1317a4fd9afbbe82ac00b3af7cb8a82a3dc1e3192a50d20db580985bb7f626a02919555241701de906251c92980d251aac00bbe894fe4d8a6b8f3e5bb73c0813cb10d7c8e67053cca5a1c040baf19f4d8518c014264bb68038e85e017e1cc8b6dd2a4948ac55afc24eb25e5e42d1cc717645ca8b5907588aec381575e71beb61faa0f0b4e4362b48d1024c4b14245719c95f07fd1fd527d682702b", 0xb4}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="333b4fe571335865a55ee51defd618dcf95317c32667eb12ea4d0cc245a83898c6d597088ca132f01e69c3e63ebefceb4df16268cd5d8294f797b5cafe6c82cacf372b308dd56add12015d046445f6fa2fff6ed61c3fe658fff90c94622ff9c919075e1e5960edae56976b2fa81f6239590423225f277730840973a66786ab7f19cfc1a7b65e3c41e242467e8135d745fb7ef5b097490d7605aa991420799de4924306ba3beca64db7531fa8daa30130ef44e7b30baa31943721d2181334477e3df3591e0ba4b433c414c5612be53af102be5f", 0xd3}, {&(0x7f0000001340)="2b965e0db5fc95bfe0998b2a214741ad7189174ad210bb623975d5a92fb9bddf07d5706aa3207163ab6fc5d995fcd125aafed8b0e5038b8bc77d290cfb97f1675696264fdda6093c3ff3269d34a442d7d28993e4f880e896ab4a0d155854359465276d81678cf591497d17fcddc79bf3d6430b0448b642b715016223bf0eeeef1e5c38ca4dbe43f26c83f678618313d65a23579cfa27628972b738bc7d36849b923bb6132fb861d5aac5b44bf34aebb66bdd7482a27f80debdaa08368e1e739af216c9efabacbd9be5446725da", 0xcd}, {&(0x7f0000001440)="0cf3de0ab5527275fa476cb5f6fcb5bd2b976d5578edde3c4954f7f5d59686d45609a12d861bd2969f09a5aedf7c4239cdf343e28988c7f7d4a7c6b5fe08dace5003e58012e3cf78e366333298e0a1086d494b22891426b137cfdcc37543b61bc310c1aebb079e8c0b4347c60979d2441818cd7cf665dc3ddcbf2678e48b6004a420981b9baca6a37fa8f86cb7939f787df970f7bfebc4f2788209480abee9fa2604b89817a43e091c98106f651b73b0d7f2ee49db1328758b493cb10830414754c4ba1de83d955cce65d70e3c87eafee94470645f40d09b21398dcfc409d7b68cb0a479fa6d775dc0f7b716b4c0a76e4b6374294ca1", 0xf6}, {&(0x7f0000001540)="8de234671cf4dd77041727f30ff2b3961443d6fbf719be4e0bedeb9e17816b3e144fcad44f5ca36c822fd984200c4175a3581a1735befe04db1214d4eea27d15b8d8665696da7e7bb03689600bbe9f3ccf25bc669552e84456ad7f95325c6c5d76aa3aecd3cc4856259c6bcb64b728e22614c37781eee7b0fa3294c7ce3ce50b4937a1e4141e8677dd2d93de214b162fde7e86e543588c9b022e4e17316b863d0bd31ab3f8411002", 0xa8}, {&(0x7f0000001600)="077b4efe684e2c3802c79ef0cf976f5cb88808e978e172a66c37411eaeb0a2d44d669ff0f3b4553749fa9897dd7b1398c4f279d54ff5030bb27f5fbc887c2868e447d6", 0x43}], 0x7, &(0x7f0000001740)=ANY=[@ANYBLOB="200000ee4b650385c931cd95449fe1361ea7a4e3a4", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4], 0x38, 0x1}, 0x40040) [ 623.881788] kauditd_printk_skb: 18 callbacks suppressed [ 623.881802] audit: type=1804 audit(1543901329.375:212): pid=22576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/190/file0/bus" dev="ramfs" ino=81766 res=1 05:28:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) socket$inet6(0xa, 0x1, 0x7fff) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r3, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) [ 623.969684] audit: type=1804 audit(1543901329.375:213): pid=22584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/190/file0/bus" dev="ramfs" ino=81768 res=1 05:28:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xf6ffffff) 05:28:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={[], [], @rand_addr=0x5}, 0x4}, 0x1c) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4000002) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) [ 624.050011] audit: type=1804 audit(1543901329.525:214): pid=22595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/191/file0/bus" dev="ramfs" ino=82834 res=1 [ 624.072387] audit: type=1804 audit(1543901329.535:215): pid=22600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/191/file0/bus" dev="ramfs" ino=82835 res=1 [ 624.178344] audit: type=1804 audit(1543901329.675:216): pid=22612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/192/file0/bus" dev="ramfs" ino=82858 res=1 [ 624.225738] audit: type=1804 audit(1543901329.705:217): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/192/file0/bus" dev="ramfs" ino=81851 res=1 05:28:52 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1004000000016) 05:28:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc004240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl(r0, 0x4f, &(0x7f0000000040)="c9fd6ed7d454b3b8af7db002058666cd7fc0cf0d6bc0d1f49669372883cd0379c8e1f1bcc932bfb0745d7b447834a3ed6585") ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:52 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8000, 0x0) accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c, 0x80800) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0xf0, 0x1, 0xe145, 0x3, 0xe1, 0x6, 0x463, 0xffffffff, 0x8, 0x5, 0x8}, 0xb) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xff, 0x80) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000040)=0xa91, 0x4) 05:28:52 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x7000000) 05:28:52 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) [ 626.939827] audit: type=1804 audit(1543901332.435:218): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/193/file0/bus" dev="ramfs" ino=81878 res=1 05:28:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7ffffffffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000001180)=""/93, &(0x7f0000000300)=0x5d) r3 = socket$kcm(0xa, 0x6, 0x0) keyctl$unlink(0x9, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000001200), &(0x7f0000000240)=0xfffffffffffffeef) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f06", 0x89, 0xfffffffffffffffd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0xa10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'ip6tnl0\x00', 'teql0\x00', 'bridge_slave_1\x00', 'bridge_slave_1\x00', @link_local, [], @local, [], 0x910, 0x938, 0x980, [@among={'among\x00', 0x87c, {{0x0, 0x800, 0x0, {[], 0x3, [{[], @loopback}, {}, {[], @broadcast}]}, {[], 0x5, [{}, {[], @remote}, {}, {}, {[], @multicast1}]}}}}]}, [@common=@redirect={'redirect\x00', 0x4}]}, @common=@log={'log\x00', 0x24, {{0x0, "1f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0xa60) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00']) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000280)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801, 0x1, 0x100000001, 0x7, 0x6, 0x200}) keyctl$revoke(0x3, r4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000f80)={0x0, 0x0, @ioapic}) dup3(r1, r3, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000001080)={0x2, 0x0, @pic={0x8001, 0x11, 0x4, 0x2e28ce88, 0xff, 0x20, 0x1ff, 0x1, 0x7fff, 0x0, 0x4, 0xffffffffffff82b7, 0x9, 0x3ff, 0x5, 0x1}}) lsetxattr$trusted_overlay_opaque(&(0x7f00000004c0)='./file0\x00', &(0x7f0000001240)='trusted.overlay.opaque\x00', &(0x7f0000001280)='y\x00', 0x2, 0x2) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x4, 0x1}, &(0x7f0000000140), &(0x7f0000000500)={0x80, 0xfffffffffffffc00, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580), 0x8}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)=0x1) ioctl(r0, 0x5, &(0x7f0000000040)="88365eb98f4e5dde04e0a8f848aee68165808bf6518d97") 05:28:52 executing program 5: mq_unlink(&(0x7f0000000000)='/dev/loop#\x00') r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xfffffffeffffffff, 0x1000000000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8001, 0x40000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0x0, 0x100, 0x4, {0x1, 0xb3, 0x6, 0x7}}) 05:28:52 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x74000000) [ 626.989058] audit: type=1804 audit(1543901332.465:219): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/193/file0/bus" dev="ramfs" ino=81880 res=1 05:28:52 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) [ 627.086794] audit: type=1804 audit(1543901332.575:220): pid=22643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/194/file0/bus" dev="ramfs" ino=82927 res=1 05:28:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0x8, 0x1e, 0x7, 0x2, 0x3, 0xffffffffffff1fd3, 0x100000000, 0x40, 0xb2, 0x5d}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @rand_addr=0xffffffff}}, 0x5, 0x7, 0xff, 0x678, 0x7fff}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0xffff, 0xfff, 0x4, 0x1ff}, 0x14) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000006c0)=0x0) r4 = geteuid() getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000007c0)=0x0) getresuid(&(0x7f0000000800), &(0x7f0000000840)=0x0, &(0x7f0000000880)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000940)=0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r10, 0x228, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d0}, 0x4050) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}}}, &(0x7f0000000a80)=0xe8) getresgid(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0) sendmsg$unix(r1, &(0x7f0000000c00)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)="2bd2567c7eb3de293eaff71c2bb2d4a4ffc9efaa2fd38fc6c61ac227f5948bffde4441bd5c69b38dbc472bc793a9912875e7afcda33204a4fe56a1db57a1e9cd5c31a447b1f20d4da82b67acae164eeba811c6db3cb1b1a7d5f0719bd2fd4214ce2a2782b79f4069b88fa6ca0f99884d5f7169d53a778339558401", 0x7b}, {&(0x7f0000000340)="79e62309d7fc0571f34afbc52e37de8c3e95cc9c3d577f1a48ee64d6265bb4cd5dc34b176510f9190d7bdb328d1ad7049ede7446a5d1a76d665323a7bda2393728e1c8b082362c65a843cf287627117aa8e8a04aead8b117c08898e77ace83a411a6385074d4ddf7377aaa4d87601c239203500c66f0277412cf3c8ab74c3f7618ebb5a7ddfaeb7a82d2ce954b82922abed80ff3eaa52a7659a8c5eef418de06f72a94e37ce9bc117be6c70419da9b82e793c476ef6bfc24060a61b201aff9a2ffa0d558ef38f00dd29801317cafd4f7dd0a2bc19331d8efb701850d3b736734572245d6b2d9", 0xe6}, {&(0x7f0000000440)="4be7bcb41f7c82ee1518208c3c3597023addb2cb212eb3412beb8b99e4f67c75479506774bf1f815ebe3ef9a8b8df8e2a2850e3a1be14f85362e6d14450aea37c3c95063b806d01e40881331b258861ba3aebced7d68d66421d0f0dc0f601c8253c4f6366023040146706a04a229ecf0ccd1c436f961c1fc04693ef880843fa4a2e13afacc98762b1a707e1d48d4a21917fcbdfda861386a28618cdcfb4703f637f04ef7e6326a900a2c49c83631f7bc5aa54b4f46d306ddfd70912087bf0a3c94b601806f574885212478c9c5235b51005f28a5eaf9b667ef65b5add038cde58225afbd12ddcdb3", 0xe8}, {&(0x7f0000000540)="2451bf69bc647d871d5455327209dc813e11e5b719f5b07d2966253bd856eb3480e1ace81faf65a9e3a9b30782cd5a59dde9a6e825be8209795ecbc0dbb7139a583d16fa21749d37e1cfecdac5711c88364b7e9b458aceedbbe9312f3a2e47f44851f6bc920cb33beb35b548e4ed6aaf95e95299f0d3335586fd16f123c4933ac51687e355d7d7c61475479ceb2450476609131c36eb91fffc15869f", 0x9c}, {&(0x7f0000000600)="a796779bcd2e09780795ae9af6397632d58e1762e11ef54a8ad7d5ac0017de6e075d8468ae561adfaef1311d5a4b59bbaf7ff59cd93a8c831c7360c17cef7e485b6ad29e7f92d47c30cf041369efbe71984da6bc5bd6fc4de688c10e8bbab7fbcba5d5444b9d210dddfcfd88f5b86879679710cb413b8af9c909b07f130a81fcc72768883e5fdee4a495086d1d656d39681e3df328cee6b47f837e2c9b9a474349", 0xa1}], 0x5, &(0x7f0000000b80)=[@cred={0x18, 0x1, 0x2, r3, r4, r5}, @cred={0x18, 0x1, 0x2, r6, r7, r8}, @cred={0x18, 0x1, 0x2, r9, r11, r12}], 0x48, 0x10}, 0x4040000) ioctl$KVM_NMI(r0, 0xae9a) write$tun(r1, &(0x7f0000000d80)={@val={0x0, 0x88b5}, @val={0x2, 0x5, 0x11a, 0x200, 0x4, 0xffffffffffffffce}, @eth={@empty, @random="948a00fcf119", [{[{0x9100, 0x2, 0x200, 0x1}], {0x8100, 0x4, 0x7, 0x2}}], {@mpls_uc={0x8847, {[{0x3, 0xc258, 0x3f7, 0x9}, {0x1, 0xb6, 0x7, 0x1}, {0xffff, 0x9, 0x4, 0xfffffffffffffe00}, {0xe04, 0x7, 0x9, 0x1000}, {0x101, 0x9, 0x935, 0x6}, {0xef, 0x3, 0x10000, 0x7}, {0x5, 0x2, 0x200, 0x9}, {0x1, 0xab, 0x3f}], @llc={@llc={0x6, 0xff, '}', "6605984f46af6927563fb1b02233a9ea9e6f417514971a7809ef4b86cba2c75d4844143df6322c1f8bf81c1752e54320d4ee9247dab473ee50f2bad18899d949dd263210f0ddcadda3c46319a6d4c3cea259b043eca72b3fa90982b5011bc5ed3fa72c85d98f725d0dd63d1d327cf1b41f48d716e30874e5c9c4240054115971882b1218960ad8d2d55f1f3f164821b1c2646fa8ac8dadc91a4361b4975eebcd30545bd6b699ede5754edd24e04250f49acce0a029f32af9b238f156dcd71ecb5a85d57204252b34a749ffbed8ecf41b4a4c38a6773b41a4509477401abeb244c089357df564d1cc4c0bfa276d"}}}}}}}, 0x134) 05:28:52 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x68) [ 627.133240] audit: type=1804 audit(1543901332.615:221): pid=22646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/194/file0/bus" dev="ramfs" ino=82935 res=1 05:28:55 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1004000000016) 05:28:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000b80)='/dev/dri/card#\x00', 0x4, 0xfffffffffffffffe) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/rfkill\x00', 0x8080, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000a00)={0x8, 0xff, 0x3, {0x6, @sdr={0x20493859, 0x3}}}) r2 = add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="d5e4bfbd03f5588dc7d1ce64cd3e69454de85df8aa81", 0x16, 0xfffffffffffffff9) r3 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)="568e44f82fb7742e9c991af8f8f51f3e2d32ccdc0a73ea77ee300a79e85f0bdaddfd923d8c655d0ccc419c23c03456e2eb9630ed6b2dd290a0adcdb61091ce5bc7f912238079f46f1e20849fc7c7ccf11c9386a5aee45580b6f56a944402ab0f77ed27100bb173e3dd7ed218b36b4a5a33297dffd0c823aa481274be42837211fe02381bd736a097a090b3db13a8b7390d56df38d731a8db2ee5e332d0534768037566f1a1f4406b8e3d1620c6e606d94ac48ec3e12a5cdf89ccd8f5c8f20cd962", 0xc1, 0xffffffffffffffff) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='trusted.overlay.opaque\x00', &(0x7f0000000900)='y\x00', 0x2, 0x3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000940)='/dev/hwrng\x00', 0x200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000700)=[{&(0x7f00000001c0)="847200534a09c7af53a4c3f49faf45b1d90372b9429c641f929b3dd5395face497c8b2767e40e78f7bef63fd53b01776c9e1cd74a96d35c95fbc4d16ba8363d165df222ad9af559818ab4beb72f49b2d", 0x50}, {&(0x7f0000000240)="550d42fc2491637391a188520d73079271ab8f8f038d66e853ed42684af53d590b6ddf7c07c27e0ec386e87794e276fcaede989cc455b54ed4afc058b511000443dbd9c4eb925a52ee2ae9debe6b335aaabe44f83ab7ff5e7d3ffc9a76872a4f71250d26cc3203afd2e73d2d9f87aa99c2310573b86394a4c0e6de9a57f7173db52f818fd13476e9022baf54662cffaad2c98f18e87a364dbe038c9a2f3131571ae13789d721cb38867a17455735d02fd76b91d0bffb693007ff7514e11d59d30c44dad8f52316e2fdd725f868e4a300e19016", 0xd3}, {&(0x7f0000000340)="4119edd73fe512b216898183ea01b88412599b26d77d1bf091c3be30739ff579d319c95b33b707beca64f8b2ce73b3740a1210de8f10a3ff561a08f4895d9ab5315085eabe46ec4547b27a7c47dfe4a803ae715e8f1d99421823f714c36cb2667c0d5c33651e573dda03949f8ca6b38e5bcf85d9a101ec905ac3a94e0b6b62ba8e8d07e6c831cb70bc8c15ef209f916006629cb433b818b298b74e558021eb20001b8c1a9523af0508358f13b431959265aaf9b51ed5774086054716cb4657bec7f3e43a140b5eb1b8ef050389d623ea2f04756f5068ef88", 0xd8}, {&(0x7f0000000440)="b2776dcc2871de289efcf1ea9296c2d8b4e7fe80c4e4d85b00bbdf22521f9f0917890c567dc950985acad61529eb03280825867db2ff48a58f3f56baf672d38d77dc78c989527627da8f1ccb034e8a6d40baab23d00411ec66ef833b7abe1eaf027a7ec65738feb2bf2341eaa672105ca459a8ef36f20789e496a2ddb5f8bd31bb63d75bd40b0102217605e67a0f8ccd644a8dcc6eb393c8df973683365f05dd43f424bf5fda47417975cf1cfa64b0d0eb4a30fdc62d1f2e8f39d6a4d3022e37a47f242cf8485a50df1d7ead560ca3242d", 0xd1}, {&(0x7f0000000540)="692ec4a275922a052601b61428b078874ae03a5ab90ed3e67845cae021dab7d9b110b51dce18d276920b62ae4afcc38e2348ac43710ac7ef19d7e12eded844a0cfd743c665cc9b79942b58f4dd27a0611568a4bf3a9b13d73a90d5ce8aa75a41cc67cc7c47ae300214d3bdccb7200e00b3ffbe4c312a6f88eb4e8cb5c400b39994c2d9f13e1fe6529c3325f5ff1179a78c010b10627ad1a0954dca6289da70a1dc3935d6d7b78c258da653a173957180314fdfdec9c9a855f33f7a401bbd1b5b6d2ea627d99e91f6783ecebd41033f069f877ceefb979ef44d9b58b8abb6a898c971ea", 0xe3}, {&(0x7f0000000640)="18cf73156ca55a48e5e52e16b309edd6251beb867daa7f8464cc30a6b9b8dffcb7c0c67a03b8e89a83ed60778bf70793e967e0299555a0cf6407e31a6514fcbbfa64413bee18ec8d3d71673f189ce5ffe442331e2152cee98e239585e5617729227a87d12636aeffc364a0eb645e5b897ba081cabb6ca80fbd32c7c0615add0f13535d3fd8eb9ad1fe18", 0x8a}], 0x6, r3) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x3179, 0x800, 0x0, 0x3, 0x9}}) 05:28:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x6c) 05:28:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:28:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x100000000, 0x14, "1ecd8edcff989bb26c01308878a7c54317e467db"}) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5251, 0x3) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) [ 630.031036] kauditd_printk_skb: 2 callbacks suppressed [ 630.031051] audit: type=1804 audit(1543901335.525:224): pid=22676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/196/file0/bus" dev="ramfs" ino=84016 res=1 05:28:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xffffff7f00000000) 05:28:55 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x37c772e9, 0x20001) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xff, 0x4000) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) 05:28:55 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000680)='/dev/md0\x00', 0x149840, 0x0) fallocate(r0, 0x8, 0x401, 0x6) geteuid() r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080), 0x4) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) [ 630.193689] audit: type=1804 audit(1543901335.685:225): pid=22698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/197/file0/bus" dev="ramfs" ino=83040 res=1 05:28:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:56 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1004000000016) 05:28:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x2000000) 05:28:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) clone(0x23912200, &(0x7f0000000000)="51870fa4bc6d5881d953445c1e9d85977116b020c5b4775ada069036c8b49cd5c5f2c2ab7b52d19355bf9b1b048cfcb89f78f09f7244a932d513db6272847e86cc4a7806a80b95025f48f10a2d80dd48a0132aae12db137e28b97238d4e1667a3edfd0521129906cec88b12608f735e960669932d2114158b52a82039b21bf1dbcced800f4dd782b8b03", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="7361434ba03141805ab3a9b0924716fe00ec542928427d23f34ceadb") 05:28:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x40, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000000c0)=0x8000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'eql\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x406, r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r3, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000001c0)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000540), 0x8000fffffffe) 05:28:56 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) [ 630.923442] audit: type=1804 audit(1543901336.415:226): pid=22717 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/198/file0/bus" dev="ramfs" ino=83091 res=1 05:28:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7ff, 0x34000) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x6, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000100)=0x6) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x5eb}, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) 05:28:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x6c00000000000000) [ 630.982776] audit: type=1804 audit(1543901336.445:227): pid=22724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/198/file0/bus" dev="ramfs" ino=83099 res=1 05:28:56 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x902, 0x0) socket(0x5, 0x1, 0x4) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) [ 631.095168] audit: type=1804 audit(1543901336.585:228): pid=22742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/199/file0/bus" dev="ramfs" ino=84146 res=1 05:28:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4800000000000000) 05:28:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000001240)={0x2, @win={{0x401, 0x100000001, 0xfffffffffffffff9, 0x10000}, 0x1, 0x1, &(0x7f0000000100)={{0x2, 0x2, 0x8, 0x9}, &(0x7f00000000c0)={{0x2, 0x2, 0x4, 0xcf74}}}, 0x1, &(0x7f0000000240)="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", 0x2}}) [ 631.149711] audit: type=1804 audit(1543901336.615:229): pid=22743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/199/file0/bus" dev="ramfs" ino=84152 res=1 [ 631.202291] Unknown ioctl -2144053727 [ 631.249484] Unknown ioctl -2144053727 [ 631.254951] audit: type=1804 audit(1543901336.735:230): pid=22754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/200/file0/bus" dev="ramfs" ino=83150 res=1 [ 631.310547] audit: type=1804 audit(1543901336.745:231): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/200/file0/bus" dev="ramfs" ino=83152 res=1 05:28:57 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1004000000016) 05:28:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x100fff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000002740)={0x0, 0x7, 0x498}, &(0x7f0000002780)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000027c0)=@assoc_id=r2, 0x4) 05:28:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4) 05:28:57 executing program 4: r0 = gettid() ptrace$pokeuser(0x6, r0, 0x3, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0x7, &(0x7f0000000140)) 05:28:57 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r2, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000001c0)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000000540), 0x8000fffffffe) 05:28:57 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x20140) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x0, 0xb40, 0x1}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) [ 631.802033] audit: type=1804 audit(1543901337.295:232): pid=22772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/201/file0/bus" dev="ramfs" ino=84201 res=1 05:28:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)=""/91) 05:28:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x7a00000000000000) [ 631.879794] audit: type=1804 audit(1543901337.325:233): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/201/file0/bus" dev="ramfs" ino=84202 res=1 05:28:57 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x80) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="232138e589ebd383fab455d211d84341202e2f66696c6530202321ff439fa811fba0ac38e2590a"], 0x19) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) rt_sigpending(&(0x7f0000000100), 0x8) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0xfffffffffffffffe) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = dup2(r0, r0) write$FUSE_LSEEK(r1, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x8, {0xffffffffffffffff}}, 0x18) ioctl$int_in(r1, 0x5423, &(0x7f00000000c0)=0x8000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80200) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$P9_RVERSION(r2, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13) 05:28:58 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 05:28:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x3f00) 05:28:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x2c3) sync_file_range(r0, 0x3, 0xfffffffffffffffd, 0x4) ioctl(r0, 0xfffeffffffffffb0, &(0x7f0000000000)) 05:28:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffc, 0x1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:58 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000000540), 0x8000fffffffe) 05:28:58 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667392", 0x0, &(0x7f000000a000)) 05:28:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4800) 05:28:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffae, &(0x7f0000000080)) 05:28:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x200000000, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x8001}, &(0x7f0000000080)=0x8) write$binfmt_aout(r0, &(0x7f0000000240)={{0x1cf, 0x1f, 0x8, 0xaf, 0x11d, 0x2, 0x3b8}, "f01849324ec0ec89250058cc4f6b05b9544a9218c878e3586e74c1f95bb2c0a19ae2783915c534389411982f8feee6", [[], [], [], [], [], [], [], [], []]}, 0x94f) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x203, 0x3f, 0x8, r2}, 0x10) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x6c00) 05:28:58 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 05:28:58 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x1000000000000) 05:28:58 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 05:28:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000000540), 0x8000fffffffe) 05:28:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xdec6000000000000, 0x121000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x1e}, 0x39f5}, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x8}, 0x2, [0x0, 0xffffffff, 0x0, 0xfffffffffffffffa, 0x4, 0x40, 0x10000, 0x51]}, 0x5c) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4008641a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[0x0, 0x100, 0x7f]}) 05:28:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7f, 0x20000) 05:28:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xa000000) 05:28:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x301000, 0x0) r2 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0xffffffffffffffff) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000540)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000840)={{{@in6, @in=@loopback}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000940)=0xe8) r8 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) getresgid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="67c657461505ddee38cbfdfe07f9c175fb64e141a598f0a82db838b031647e48d7f8292e6f113da99214dfcd5fe9955ff5d68c3bf27f5714e4e6dadb615decb6bc4dc660afbdceb9d44d8befa1a25ecae15b56a3df4e07badda05da499004188edab83144ae5cce0d3d11f13515ba87803e2092e8f21f35e93111f7fe172be2dff17c80a37904eac6b95e07faab2aafde1b6826c1f52160987b327da931d2d92bd843a92b36cb585d821005676d80b97e997a367ec8d5ae1f96bd179e16545fdfa5ee6d042cec6584602d2f549ce6d461e9a3c2facade7c2b9410b", 0xdb}, {&(0x7f0000000200)="634d92fcf47402579f0a77cb56d2", 0xe}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="100000000100200001830000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10], 0x78, 0x40}, 0x805) 05:28:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x10507f) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x3f000000) 05:28:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x9, [0x1, 0x3, 0x8, 0x3, 0x4, 0x5, 0x96, 0x7fffffff, 0x40]}, &(0x7f0000000040)=0x16) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:28:59 executing program 4: fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/118) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x111000, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1ff, 0x94000) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="e84be9d9a2fac2a5dc6d5e864ca32e911f449a7cbc5e1882a99f5f5cdf891514b216dc22bb5425b6ac9772f98bf2c3d11d11867e0e8602331e229ce25df7ee40b7411f13cd8b98848d2ed00c7bfafc507a98f4eae22e28b0729abbb79482a28b6d7a7017abdd1140e50522cf76292df229f96436a185edf4"], @ANYBLOB="03080700020000000000000002000000"]) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x6c000000) 05:28:59 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 05:28:59 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:28:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000000540), 0x8000fffffffe) 05:28:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x105401) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000240)={"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"}) 05:28:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:28:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4c) 05:29:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000240)={0x1, 0x3, 0x1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x5, 0x8004, 0x2, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e22, 0x2, @local, 0x1}}}, &(0x7f0000000180)=0x84) 05:29:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x44440, 0x0) 05:29:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x802, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000240)={"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"}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000040)={0xa1d, 0x200, 0x7}) 05:29:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x400000000000000) 05:29:00 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r1, r2, 0xffffffffffffffff}) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0xeb1, 0x6}]}, 0xc, 0x1) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6111ebe3, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x44000) 05:29:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x40) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4000000) 05:29:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:00 executing program 5: eventfd2(0x7, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x40000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000000540), 0x8000fffffffe) 05:29:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x6800000000000000) 05:29:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'bond0\x00\x00Z\x00', @ifru_ivalue=0x20b17d7b}) ioctl$sock_ifreq(r0, 0x4000000000089f3, &(0x7f0000000000)={"736974300000000400", @ifru_flags}) 05:29:00 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) [ 635.218334] kauditd_printk_skb: 19 callbacks suppressed [ 635.218359] audit: type=1804 audit(1543901340.715:253): pid=22957 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/212/file0/bus" dev="ramfs" ino=84590 res=1 [ 635.313694] audit: type=1804 audit(1543901340.805:254): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/213/file0/bus" dev="ramfs" ino=83602 res=1 05:29:00 executing program 3: 05:29:00 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000080)="9eecf7dd0cd95cd8aa30601348e64df1e9b3bab74c009b6497be1ddf93164d15cf440de9ec288384249ba6ce89a059ff210725940342d41e7e69e31d73bab09fcc0679b3ed42c6e507a2e82031c03ed97130d319a69828d81e44646c0c2882ac624268d942d0312d25dce8986414e5d73d0ef234a73c2b5949f2e7b13b322964d8e08a04858380675b91b77cd560dada60619e7f9342ca55f39bfaafcf62abb1", 0xa0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x66) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00000002c0), 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="280b28bd7000fcdbdf25020000000c0004000100010000000000080001000000010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KDSKBLED(r0, 0x4b65, 0x81) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x10, &(0x7f0000000040)=0x3f, 0x4) 05:29:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x38b8, 0x8000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x7f, 0x3, 0x100, 0x3, 0x31}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) [ 635.366844] audit: type=1804 audit(1543901340.835:255): pid=22974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/213/file0/bus" dev="ramfs" ino=83603 res=1 05:29:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xfffffff6) 05:29:01 executing program 3: 05:29:01 executing program 3: 05:29:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)={0x0, @speck128}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8000, 0x80}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="29000000432e16b82645adb05374ac69a4a2ee7282eef16c1df6f14d815feb33085e65bb3b96c64230ced27d829ef98ae1d30c92a1483e25220b004e94a1eca04c9ac6321218877f6fa10c77be35df95fbf5b9314fe657c0431f961ee5ce1dab4f2966ca72debc8948b2541100046ec6a976fec293a76d96c8e0290a14263a8fc867699d65259fd36a565dfd15e451a4904ce830bdb2caeeba130000000000"], &(0x7f00000001c0)=0x31) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000200), &(0x7f0000000240)=0x14) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) [ 635.547332] audit: type=1804 audit(1543901341.045:256): pid=22989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/214/file0/bus" dev="ramfs" ino=83631 res=1 05:29:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000000)) 05:29:01 executing program 3: 05:29:01 executing program 4: ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000140)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x800, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x32, @multicast2, 0x4e21, 0x1, 'lc\x00', 0x4, 0xfffffffffffffff7, 0x7}, 0x2c) prctl$PR_SET_FPEXC(0xc, 0x50000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x10000000000c) 05:29:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xa) 05:29:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x200, 0x8, 0xffff, 0x4, 0x0, 0x2, 0x400, 0x8, 0x4, 0x8, 0x3, 0x2, 0x2d7, 0x48d, 0x34a0, 0x5779, 0x7e8, 0xffffffff, 0x4, 0x4, 0x1, 0x7ff, 0x4, 0x54, 0x3, 0x7, 0x6, 0x9, 0x851, 0xeba, 0x5, 0x5f13, 0x1, 0x7fffffff, 0x800, 0x8, 0x0, 0x1, 0x5, @perf_bp, 0x5100, 0xee, 0x7ff, 0x1, 0x25b, 0x7fff, 0x20}, r1, 0xf, 0xffffffffffffff9c, 0xe) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000440)={0x0, 0x10000}, &(0x7f0000000140)=0x8) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000020600009500000000000000fc500300fcffffff95000000000009000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x73, &(0x7f0000000280)=""/115, 0x40f00, 0x0, [], r3, 0xc}, 0x48) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) 05:29:01 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) 05:29:01 executing program 3: 05:29:01 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000000540), 0x8000fffffffe) 05:29:01 executing program 3: [ 636.229706] audit: type=1804 audit(1543901341.725:257): pid=23017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/215/file0/bus" dev="ramfs" ino=83709 res=1 05:29:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xa4000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 636.278812] audit: type=1804 audit(1543901341.755:258): pid=23018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/215/file0/bus" dev="ramfs" ino=83715 res=1 05:29:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r2, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:01 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r1, &(0x7f00000075c0)=[{{&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x0, 0x5, "30d255e0bde7eca7c29ae81ee8e843564e8b91eb75bd60b183ec54eb057e3d6cb4eaba9ef9e20cee7a7341411f9b0897796b72b5e1b25e3f1b45ff2057ddbe"}, 0x80, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="680000000000000007010000000901003bd04530eaafa104454275bd905a0277b680fe59cd4b9eb667c2a8a2411a6680f9a1aafaaa6ed14c5809e174754184bbd4ce3c8825d245eaa871aca2ae8c5e4f410000000000000000000000000000"], 0x5f}, 0x1}, {{&(0x7f0000001680)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'syzkaller0\x00'}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002b00)="fc06726ee48f59bafb80bfcedd1971997a6ff2", 0x13}], 0x1, 0x0, 0x0, 0x40010}, 0xf17}, {{&(0x7f0000002c80)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni-avx2\x00'}, 0x80, &(0x7f0000004240)=[{&(0x7f0000004180)="1c8ecc11ad19a84601995cfe85b1d8be4b68e4bc83b4be545599d49b456adacf3efb6217023e29283f1760f47ba56023affd57de219f33bef000a7a366b27e17468cd5ea0cefa910cad48cd3290516c8b3adbf686a3149578550cb7615688b0c50ff8885f2d5a9f716396011103f5385af3ccf90a07b", 0x76}], 0x1}, 0x2}, {{&(0x7f0000004540)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000004800), 0x0, 0x4}, 0x9de}, {{&(0x7f0000005cc0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005e40)="b4ba6d7006e302f430ab83b4e14ebd5607c5be51b6", 0x15}], 0x1, 0x0, 0x0, 0x800}, 0x2}, {{&(0x7f0000006280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2}, 0x0, 0x3}}, 0x80, &(0x7f0000006380), 0x0, &(0x7f00000063c0)}, 0x6}], 0x6, 0x20040004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)) tee(r2, r2, 0x2, 0x8) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000100)=0x80000000) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000000)) r3 = syz_open_pts(r2, 0x0) r4 = getegid() r5 = getegid() setresgid(r5, 0x0, r4) write(r2, &(0x7f0000c34fff), 0xffffff0b) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) dup3(r2, r3, 0x80000) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 05:29:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x74) 05:29:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) fcntl$dupfd(r0, 0x406, r0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "fee1339553fa3adb0ba0c5b893c52aed"}, 0x11, 0x2) 05:29:01 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667302", 0x0, &(0x7f000000a000)) [ 636.492880] audit: type=1804 audit(1543901341.985:259): pid=23040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/216/file0/bus" dev="ramfs" ino=83756 res=1 05:29:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4000000000000000) 05:29:02 executing program 5: set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x80) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000001c0)="ad8e3c1ddce3a661dc513def3c051ac3570eaee94b850882", &(0x7f0000000240)=""/234}, 0x18) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00000082be9b41d85238caccf559c746e47fd0542052d9ebbf7720e98715cfa9138fc16ce68e4da666c40d21f952afb5c58ecc549eef3513be09ac01a311456e25911187e4eeb8278f3c8540bc65b5e0873361a7827a6e5baa3ceec1bbfec870fe82c5ebf34ed64d3c5b3dc825db9b9b97c42cc45196cc8644da6136638ab7a6225533f26e6528a41a837309c0483c2accfc0eee48ae3874f12d376b9b665ff6055294b743022bf4ae08da5969209fa607", @ANYRES16=r1, @ANYBLOB="04002cbd7000ffdbdf25030000000c00050002000000000000000c0006000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x40000000010, 0x2000000000009, "947d7392abf51f06cbaf806843ce427f85d6921b27336e2c5516a26573c0cbee645d7a2c33e2707a0149c9eeaa3aa3a1125a31a151303a0caef1d269852b070c", "5ab67a167f4e350c59803979aedf583646a6195c739ba4d74f8498342d4ae0c7", [0xa0000, 0x4c96000000000000]}) [ 636.560831] audit: type=1804 audit(1543901342.015:260): pid=23044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/216/file0/bus" dev="ramfs" ino=83759 res=1 05:29:02 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x400000000080050, r0, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000080)) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) [ 636.705365] audit: type=1804 audit(1543901342.195:261): pid=23057 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/217/file0/bus" dev="ramfs" ino=83775 res=1 05:29:02 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:02 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673dc", 0x0, &(0x7f000000a000)) 05:29:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) recvmmsg(0xffffffffffffff9c, &(0x7f0000003b40)=[{{&(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000600)=""/243, 0xf3}], 0x5, 0x0, 0x0, 0x1ff}, 0x4}, {{0x0, 0x0, &(0x7f00000008c0), 0x2, &(0x7f0000000900)=""/167, 0xa7, 0x10001}, 0x80}, {{&(0x7f00000009c0)=@rc, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000003e40)=""/144, 0x90}, {&(0x7f0000000b00)=""/154, 0x9a}, {&(0x7f0000000bc0)=""/88, 0x58}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/160, 0x37}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/31, 0x1f}, {&(0x7f0000001d80)=""/23, 0x17}], 0x8, 0x0, 0x0, 0x9}, 0x2}, {{&(0x7f0000001e00)=@llc, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/186, 0xba}], 0x1, 0x0, 0x0, 0x9}, 0x4}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/9, 0x9}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/126, 0x7e}, {&(0x7f0000003100)=""/137, 0x89}, {&(0x7f00000031c0)=""/94, 0x5e}, {&(0x7f0000003240)=""/254, 0xfe}, {&(0x7f0000003340)=""/35, 0x23}, {&(0x7f0000003380)=""/233, 0xe9}], 0x9, 0x0, 0x0, 0x6}, 0x1}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003500)=""/249, 0xf9}, {&(0x7f0000003600)=""/114, 0x72}, {&(0x7f0000003680)=""/191, 0xbf}, {&(0x7f0000003740)=""/111, 0x6f}, {&(0x7f00000037c0)=""/245, 0xf5}, {&(0x7f00000038c0)=""/210, 0xd2}, {&(0x7f00000039c0)=""/199, 0xc7}], 0x7, &(0x7f0000003b00)=""/44, 0x2c, 0x3}, 0x100}], 0x6, 0x40, &(0x7f0000003c00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003c40)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000003d40)=0xe8) getpeername(0xffffffffffffffff, &(0x7f0000003d80)=@hci={0x1f, 0x0}, &(0x7f0000003e00)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000003f80)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004140)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000004240)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004280)={@broadcast, @remote, 0x0}, &(0x7f00000042c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004640)={0x0, @remote, @broadcast}, &(0x7f0000004680)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000047c0)={'syz_tun\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005a40)={0x0, @loopback, @loopback}, &(0x7f0000005a80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000005ac0)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000005bc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000005c00)={0x0, @loopback, @local}, &(0x7f0000005c40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005d40)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000005e40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000005ec0)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000005fc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000006000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006040)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000006600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2800020}, 0xc, &(0x7f00000065c0)={&(0x7f0000006080)={0x518, r1, 0x402, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x12c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x184, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x23d6}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r14}, {0x164, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl(r0, 0xffffffffdfffffb0, &(0x7f0000000080)="3691e7bb6890edf02725abbd79f0ad40ed482cb5787e4d1183a283c0789002a9dcbcfbb60c189c4aa21a1dc4d7242f4aa96fe37d6f3e13584591dc2221de57309edec7438f") 05:29:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = getpid() r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x208803, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x4, 0xffffffff, 0x0, 0x4, 0x0, 0x100000001, 0x80000, 0x4, 0x9c4a, 0x3ff, 0x80, 0x3, 0x8, 0x10001, 0xa1, 0xfffffffffffffffa, 0x6, 0x1, 0x8, 0x497d, 0x3, 0x0, 0x8, 0x3, 0x4c6280d8, 0x4, 0x0, 0x3, 0xde, 0x101, 0x2, 0xfffffffffffff4e8, 0x5, 0x8, 0x83, 0x5, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x20000, 0x2, 0x7, 0xf, 0x81, 0x3, 0xfff}, r1, 0xffffffffffffffff, r2, 0x1) 05:29:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x6) [ 636.944822] audit: type=1804 audit(1543901342.435:262): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/218/file0/bus" dev="ramfs" ino=83827 res=1 05:29:02 executing program 3: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) symlink(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='./file1\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000380)=""/11, 0xfcb5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) 05:29:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:02 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) fcntl$setsig(r0, 0xa, 0x26) 05:29:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x700) 05:29:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x1000000000000) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4000) 05:29:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="e1977e6b9108", 'yam0\x00'}}) 05:29:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) 05:29:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x7a00) 05:29:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="98000000886a00006d1359cf1903345fb841a3c9914822bc22ba39c411efe5463bf23925b3eeba2dad36fabde1847fa8b71f9feb5fd0151fd4563e7adee99c8131644c22d718c06705bb5a583b3109f6efd464af4ba4a60b5e184e0167de84d6f816841a4d7c5d969f48d4a6e25a4f6d3d7f5daf295c5d40986c4cf896482abf6416767ffd8f8b9c09b10fcce149d53ebc956b31530c573d11e4121b12766eac4a090b1b517c297b19e028b6ee20ec64"], 0x400) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) socketpair(0x11, 0x3, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000000140)={0x5, 0x9, 0x3, 0x6, 0x10, 0x5}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x9, 0x7, 0x9, 0x6, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_ident={0x2, 0xb, 0x0, 0x0, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2a, 0x3505}]}, 0x30}}, 0x8000) 05:29:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x2, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0xff, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0xfffffffffffff32e, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200c72054b4851d000000708f31242ad4f3f3f00d0a04500c7c1f53"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000bc0)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x7, 0x6, @remote}, 0x80, &(0x7f0000004240)=[{&(0x7f0000004100)="49c6c5f4afa6c86ef1c5989d19f68ba462164ecc55f6057816dae92293273612ca3693bf8029cf8db6542a20f149d47f6ee98e5c237ee3aab9ae1325f1b962e5f09c530d30e2db994250d7da60b5c83e5ee27e13e607f0802172e05ecb357ea0d6b0d9673b87509d229b0618cc3852dc145af37c9bc055288d640f24145b44affdd8e62a9d3fce3f5abad77beb45ac0eb102dc782d23aeb66cb1f5cf7aeea7a0e9ebf37c218e38d9976606368e78eae6f21637718261de465cf407dbcb47a6de6ed1e70f98dc065d3a3e8a5044e5a5d942e6573ab1452c5c7f2741e1b025166715f40f2efb7a9cc0b110a0", 0xeb}], 0x1, 0x0, 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r9, &(0x7f000000a180)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg(r12, &(0x7f0000000500)={&(0x7f0000000440)=@ipx={0x4, 0x5, 0x5, "3e5b2a0820b2", 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x20048040}, 0x20000010) sendmsg$kcm(r13, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x8000) sendmsg(r13, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000000380)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000280)='&selinux#-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="b700000007ed0040bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff0000010000000000000000012d40050000000000550400fb2f94df288fbfc46ac7faaa851873930900010d4b967ed97036ed00001d0420a40000e12d67e11bf07cb200006b0a60c8000000008500000007000000f70000000000000095"], 0x0}, 0x48) 05:29:03 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt(r0, 0xdd21, &(0x7f0000000100)='\a"0u') ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x8) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) 05:29:03 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) 05:29:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x7ff, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000300)=0xe8) r3 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000600)=0xe8) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x10020, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize'}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}], [{@hash='hash'}, {@appraise_type='appraise_type=imasig'}, {@fowner_eq={'fowner', 0x3d, r4}}, {@fowner_lt={'fowner<', r5}}, {@obj_user={'obj_user', 0x3d, '/#'}}, {@euid_lt={'euid<', r6}}]}}) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x8, 0x20200) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r7, 0x2}) 05:29:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4c00) 05:29:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x100000, 0x200080) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000180)=0xe8) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x7, 0x70, 0x0, 0x8001, 0x3, 0x9045, 0x0, 0x2, 0x400, 0x4, 0x5, 0x5, 0x4, 0xbd, 0x0, 0xfffffffffffff801, 0x80000001, 0xbf74, 0x4, 0x4, 0x7ff, 0x2c18, 0x1, 0x3, 0xfffffffffffffffa, 0x9, 0x0, 0xfffffffffffffffc, 0xe9, 0x101, 0x3, 0x8, 0x7, 0x9, 0xbd, 0x1f5dca2b, 0x7, 0x1, 0x0, 0xe7, 0x2, @perf_config_ext={0x638, 0x800}, 0x22, 0x4, 0x6, 0x9, 0x725, 0x7f, 0x6}, r2, 0x1, 0xffffffffffffffff, 0x2) r3 = geteuid() ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x802c560a, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000340)="e845cd5ca3eeb4c1da459e8e82afb0372cd73933c2775ff9785dd403f38291987fae2e59e1b33a42cc52a4393a076eb0e8752314e6e07cb98ffe6fd38af4713b66d91f46fab97c01fd2fbe1d8c85c2ea681b4eecd936b92927ba1b2f0bafad17c56cfc3c99b329568b6b66688400923c60c2ca0c587af18c9488adf7e4a609207fcd0fdfa1627fef3a685ada3b6848c305d2d3176101c0026f24449eba945e4b7292edc4d3967df852a00c2facd652a5b6b11eb948438bde5da82ed8183b8553", {0x40, 0x3, 0x77714f5d, 0x7, 0x42, 0x6, 0x8, 0x800}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@loopback, 0x4e24, 0x7, 0x4e22, 0x800000, 0xa, 0xa0, 0xa0, 0xc, r1, r3}, {0x6, 0x2, 0x81, 0x5, 0xfa35, 0x3f, 0x10001, 0x7fffffff}, {0x8, 0x3, 0x0, 0x3}, 0x791, 0x6e6bb7, 0x1, 0x1, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x33}, 0x2, @in=@rand_addr=0x100, 0x0, 0x3, 0x0, 0x400, 0x800, 0x9, 0x1529}}, 0xe8) 05:29:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x500) 05:29:03 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) finit_module(r0, &(0x7f0000000000)='/dev/loop#\x00', 0x1) 05:29:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x2, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0xff, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0xfffffffffffff32e, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200c72054b4851d000000708f31242ad4f3f3f00d0a04500c7c1f53"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000bc0)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x7, 0x6, @remote}, 0x80, &(0x7f0000004240)=[{&(0x7f0000004100)="49c6c5f4afa6c86ef1c5989d19f68ba462164ecc55f6057816dae92293273612ca3693bf8029cf8db6542a20f149d47f6ee98e5c237ee3aab9ae1325f1b962e5f09c530d30e2db994250d7da60b5c83e5ee27e13e607f0802172e05ecb357ea0d6b0d9673b87509d229b0618cc3852dc145af37c9bc055288d640f24145b44affdd8e62a9d3fce3f5abad77beb45ac0eb102dc782d23aeb66cb1f5cf7aeea7a0e9ebf37c218e38d9976606368e78eae6f21637718261de465cf407dbcb47a6de6ed1e70f98dc065d3a3e8a5044e5a5d942e6573ab1452c5c7f2741e1b025166715f40f2efb7a9cc0b110a0", 0xeb}], 0x1, 0x0, 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r9, &(0x7f000000a180)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg(r12, &(0x7f0000000500)={&(0x7f0000000440)=@ipx={0x4, 0x5, 0x5, "3e5b2a0820b2", 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x20048040}, 0x20000010) sendmsg$kcm(r13, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x8000) sendmsg(r13, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000000380)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000280)='&selinux#-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="b700000007ed0040bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff0000010000000000000000012d40050000000000550400fb2f94df288fbfc46ac7faaa851873930900010d4b967ed97036ed00001d0420a40000e12d67e11bf07cb200006b0a60c8000000008500000007000000f70000000000000095"], 0x0}, 0x48) 05:29:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)=ANY=[@ANYBLOB="080000007800000030e820a95e251b3c9c439a540bd856a15e6e575285f0b24268aeceab2cd10f72f324dd3d541e8d3b4acdff410faac1455ef9ef11f1c2a83bd72de6875c80e5b78c8b8a7c1ab340ad7d49ae7203c2822185b21fc81058c7d3b0ecfa0c6b9a959116506e020f2577e7895d2069f03e2f5adbd66824b5cfe002"]) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x20) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x7a) 05:29:04 executing program 5: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x400000) flock(r0, 0x4) 05:29:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 05:29:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x500000000000000) 05:29:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40003, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xffffff7f) 05:29:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0xc2, "092c6f1c455d82de096006b42dd100a263cdc8e9f253064b4b569f174f69238f1c6a1c942dd862bdc1fe671430446be4afd05c2def5baace3d1f89472def8449bfcc41c56facbdeca720015b91d389facdf42f8462da66c39a8887aaf206748c3e96450ea0c37b10a39cf06fbb551e6630e8d8a6b9261cd70c3b5dacb3e864e2b582fba4855ff1fbbad1d0ffa8d590cb3a4ed52349522c249b8ce5f12b8ba5f485d52c7d43fb9fb65f3329f30f325249e7d27a9768b1bfaedd5668e275a3262eae70"}, &(0x7f0000000140)=0xe6) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:04 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:04 executing program 4: r0 = epoll_create1(0x80000) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0xffffffff, 0x8, 0xffffffffffffff80, 0x2, 0x3e, 0x8, 0x201, 0x40, 0x237, 0x7, 0x2, 0x38, 0x2, 0x9, 0x1, 0x81}, [{0x6, 0xc70b, 0x484, 0x41, 0x9, 0x80000000, 0x3ba2, 0x7f}, {0x6, 0x3ff, 0x800, 0x5, 0x18000000000, 0x7, 0xc38, 0x6499}], "4a875199d903c6e3ab500465651c074cc6126d7f913c8a04609e2917a5170cdc24ca93a919d609e769c5eab2015b497daae40adb684213cdea010e073e5da2aecfc65a362b283cf94fb0a6c87c53f0da5b4256e8d56df2b4037d1e17e00c9ba94f", [[], [], [], []]}, 0x511) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x2, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0xfffffffffffffffa, 0xfffffffffffffe00, 0x2, 0x1, 0x0, 0x3, 0x20000, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x5, 0x5, 0x100, 0x6, 0x401, 0x4, 0x3, 0x100000000, 0x9, 0x0, 0xff, 0xe58b, 0x3, 0xc4, 0x1000000, 0x3, 0x5, 0x7c3, 0x8, 0xfffffffffffff32e, 0x5, 0x1, 0x40, 0x1000000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x9108, 0x100000001, 0x469ca797, 0x0, 0xe3a, 0x101, 0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={0xffffffffffffff9c}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000f80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, 0x0, 0x0, 0x3ff}, 0x2020) sendmsg$kcm(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)="0465b3c19e63ad6eba7f8f7a34e01751e39f299535bb229b1e0c439be4b4038d0f3ad6a80cda6f471a33b796e6c9058071752833f58a145397e188a03a22aeea10cc4ad6da8d673aab1817b21702283e48bee188dc4cbf72740964c4f6d106eeef058c6fc768ed2e1c40bedea4b7bf79021a25678bb4284949351ae3d40d92", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200c72054b4851d000000708f31242ad4f3f3f00d0a04500c7c1f53"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000b00)={&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/72, 0x48}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/116, 0x74}], 0x8, &(0x7f0000000a80)=""/82, 0x52, 0xffff}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000bc0)={r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r8, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r9, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)}, 0x2000c4ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg(r9, &(0x7f0000003f00)={&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/128, 0x80}, {&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/203, 0xcb}, {&(0x7f0000003c80)=""/134, 0x86}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/244, 0xf4}], 0x7, 0x0, 0x0, 0x2}, 0x100) sendmsg$kcm(r7, &(0x7f00000046c0)={&(0x7f0000003f40)=@ll={0x11, 0xff, r10, 0x1, 0x7, 0x6, @remote}, 0x80, &(0x7f0000004240)=[{&(0x7f0000004100)="49c6c5f4afa6c86ef1c5989d19f68ba462164ecc55f6057816dae92293273612ca3693bf8029cf8db6542a20f149d47f6ee98e5c237ee3aab9ae1325f1b962e5f09c530d30e2db994250d7da60b5c83e5ee27e13e607f0802172e05ecb357ea0d6b0d9673b87509d229b0618cc3852dc145af37c9bc055288d640f24145b44affdd8e62a9d3fce3f5abad77beb45ac0eb102dc782d23aeb66cb1f5cf7aeea7a0e9ebf37c218e38d9976606368e78eae6f21637718261de465cf407dbcb47a6de6ed1e70f98dc065d3a3e8a5044e5a5d942e6573ab1452c5c7f2741e1b025166715f40f2efb7a9cc0b110a0", 0xeb}], 0x1, 0x0, 0x0, 0x80}, 0x10) recvmsg(r9, &(0x7f0000009e80)={&(0x7f0000008980)=@ll, 0x80, &(0x7f0000009d40), 0x0, &(0x7f0000009dc0)=""/137, 0x89}, 0x2) sendmsg(r9, &(0x7f000000a180)={&(0x7f0000009ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a140)}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$kcm(0x2, 0x20000000000003, 0x84) sendmsg(r12, &(0x7f0000000500)={&(0x7f0000000440)=@ipx={0x4, 0x5, 0x5, "3e5b2a0820b2", 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x20048040}, 0x20000010) sendmsg$kcm(r13, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb70a1c008128", 0x11}], 0x1}, 0x8000) sendmsg(r13, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000000380)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000280)='&selinux#-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="b700000007ed0040bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff0000010000000000000000012d40050000000000550400fb2f94df288fbfc46ac7faaa851873930900010d4b967ed97036ed00001d0420a40000e12d67e11bf07cb200006b0a60c8000000008500000007000000f70000000000000095"], 0x0}, 0x48) 05:29:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x10000000000009, 0x101004) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x3000000) 05:29:04 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80802, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9088044}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x110, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r3, 0xed, "87f5e17631844893729aebadf3305350cc71ed54f14c3798397917f37c4a162e57d36db6a5ef45d4a9c7e201b44b78205190e0ea641797376f7bd4ddeb24054dad8e2a21b191daaefe7ac7b2199d3da34431adf16d076dc6489d17eb51678f9804e0d2fd83d0599b24b09f99008acc50eaac302eac4ae6a31d79eacf1e1a264da93aad147b671d493cbb861d3470500e0a47133bc81800eb4bf756e15342f582f3cb97abc0395d9ddb9a66d9af1ad7b46e9093ad52ffbfab6c4f9d62caa26a67088174163c78eb128b2193240b7ec56db49c34301d0ec6c16eb69828fd3393c13d6b825b4f3bfe6fccc7f4d801"}, &(0x7f0000000340)=0xf5) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) connect$bt_rfcomm(r1, &(0x7f0000000380)={0x1f, {0xffffffff7fffffff, 0x9, 0x2, 0x10000, 0x7, 0x6d1edb0f}, 0x8001}, 0xa) 05:29:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4c000000) 05:29:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = syz_open_dev$admmidi(&(0x7f00000010c0)='/dev/admmidi#\x00', 0x4000000000008, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x3f, 0x7002}) sysinfo(&(0x7f00000000c0)=""/4096) 05:29:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = getpgid(0x0) sched_setparam(r1, &(0x7f0000000000)=0x100) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:05 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000084) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, 0x0) 05:29:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) socketpair(0x5, 0x5, 0x8, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x3, 0x1f, 0x4, r1}) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000000000000000000036d1f76626b5e1f8b30871408540d6d886d0f59bcfcb6310812154f8f38204168d85991c465ebf17575202e2d1abc25f82240830459e898d0ae0bc38aae89fff0b35680ad4cd115781a840fbe84950e4d98e66ddc3c7fd20498549ac09c6a6e0f4b7a48c0b6744923282ba1d633907e551492ef8a76bb020ae20091d04ee9215ae03dc52c3309c05f3d6ec21fe6b", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040001000000000008000400", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="10000500000000002000020000000000"], 0x5c, 0x3) 05:29:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x6, {0x0, 0x2}}, 0x20) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={r2, 0x3}) 05:29:05 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xffffffff00000000) 05:29:05 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) mknod$loop(0x0, 0x0, 0xffffffffffffffff) ioctl$KDSKBLED(r0, 0x4b65, 0x7) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast2}, &(0x7f00000003c0)=0xc) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r3 = dup(r1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000100)={@empty, 0x34}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000380)) ioctl$TIOCCBRK(r3, 0x5428) r4 = getpid() rt_sigprocmask(0x2, &(0x7f0000000040)={0x3}, &(0x7f0000000340), 0x8) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) prctl$PR_GET_THP_DISABLE(0x2a) sched_setscheduler(r4, 0x7, 0x0) recvfrom(r2, &(0x7f0000000640)=""/4096, 0x1000, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 05:29:05 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667312", 0x0, &(0x7f000000a000)) 05:29:05 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x20000000001000, &(0x7f00000002c0)="e955d8efb4fba0fefa4bee4d26f102622952ea7686d6d196475315371c2d4e4a43603f28ad6c88ad130da5e467984846cdf42d1ae06a6e4e6609688271fc5e1b936b17bffcf5795fe7e455e0e5fc6efc2d63f724e121a770e73b4ef718d923d38fddc142b91ea3e37843f1b683b18ebc3cd43992abcdd140228af798350a15bbebc47127407458f53deca701eec8fe1bfc7eeedb979581d75b4389d08b44bb3edefaf4c8360500000000000003996ed4683aa1") 05:29:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socketpair$inet(0x2, 0xba4e31e0f69928eb, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x2677, 0x4) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 05:29:05 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x4c00000000000000) 05:29:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) [ 640.369223] kauditd_printk_skb: 19 callbacks suppressed [ 640.369238] audit: type=1804 audit(1543901345.865:282): pid=23286 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/230/file0/bus" dev="ramfs" ino=85302 res=1 05:29:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x400080) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x3f000000) 05:29:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x6000000) [ 640.477278] audit: type=1804 audit(1543901345.895:283): pid=23287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/230/file0/bus" dev="ramfs" ino=85303 res=1 05:29:06 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) [ 640.605317] audit: type=1804 audit(1543901346.095:284): pid=23309 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/231/file0/bus" dev="ramfs" ino=85344 res=1 05:29:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) readahead(r0, 0x87ad, 0xbe) [ 640.635936] audit: type=1804 audit(1543901346.095:285): pid=23311 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/231/file0/bus" dev="ramfs" ino=85356 res=1 05:29:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x40000000) [ 640.698509] audit: type=1804 audit(1543901346.125:286): pid=23313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/newroot/304/file0/bus" dev="ramfs" ino=85364 res=1 [ 640.788287] audit: type=1804 audit(1543901346.285:287): pid=23324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/232/file0/bus" dev="ramfs" ino=85402 res=1 [ 640.809469] audit: type=1804 audit(1543901346.285:288): pid=23325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/232/file0/bus" dev="ramfs" ino=85404 res=1 05:29:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x7, 0x6, 0x8, 0x80000001, 0xfcbc}) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffff9c) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:06 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1004000000016) 05:29:06 executing program 5: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xda4, 0x2, 0x0, 0xd, 0x10, 0x10, "7a6faf0cec3bb404dce709719976cba2b6ded4f87e862fc12ca78c64a3b01b45a0345339c52182f2da5b9d5d05f319aab7338a874c278ccb7ff6c34a033921a1", "33c94a37038593338f45d1251db9ca1b018b83a18aad2e21552bbe8ab0a710b3edc982668b0cce6f36344eea483dfd737ce12d4586df5f9e37d6fe4542dc9104", "a2964b9becc462dcd1eef957050729e1fff8629b276885e2b3235b7cbeb3961f", [0xfffffffffffffa30, 0xfffffffffffffff7]}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) 05:29:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x68000000) 05:29:06 executing program 5: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 640.909414] audit: type=1804 audit(1543901346.405:289): pid=23335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/233/file0/bus" dev="ramfs" ino=85418 res=1 05:29:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x311642, 0x0) setsockopt$sock_int(r1, 0x1, 0x1f, &(0x7f0000000140)=0x2, 0x4) 05:29:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x6800) [ 640.947023] audit: type=1804 audit(1543901346.425:290): pid=23336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/233/file0/bus" dev="ramfs" ino=85420 res=1 [ 641.087951] audit: type=1804 audit(1543901346.585:291): pid=23353 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/234/file0/bus" dev="ramfs" ino=85462 res=1 05:29:06 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:06 executing program 5: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) 05:29:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x280000, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) fchdir(r0) fcntl$notify(r1, 0x402, 0x1) 05:29:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x7) 05:29:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x2}, &(0x7f0000000100)=0x8) 05:29:07 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r2, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000001c0)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000000540), 0x8000fffffffe) 05:29:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = getpgrp(0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@dev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0)={@mcast1, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000800)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000900)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @empty, @remote}, &(0x7f0000000980)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000009c0)={0x0, @loopback, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000a40)={@multicast2, @loopback, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d40)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000d80)={0x0, @dev, @remote}, &(0x7f0000000dc0)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', r15}) getpeername(0xffffffffffffffff, &(0x7f0000000ec0)=@can={0x1d, 0x0}, &(0x7f0000000f40)=0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x14800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000f80)={0x530, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x1bc, 0x2, [{0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xf8a}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x78, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r11}, {0xe8, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x10001, 0x1ff, 0xfffffffffffff801, 0x7}]}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x194, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xe54}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0xffffffffffffff3f, 0x8, 0xffffffff80000000, 0x8}, {0x1ff, 0xfffffffffffffffa, 0x7, 0x7}, {0x8, 0x80000001, 0x6, 0x7}, {0x1, 0x2, 0x0, 0x400}, {0x800, 0x5, 0x6, 0x3}, {0x3, 0x800, 0x9, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x880}, 0x1) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0xbf8) 05:29:07 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x1000000) 05:29:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8001, 0x100) 05:29:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x5000000) [ 641.779831] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:29:07 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x6, 0x4) 05:29:07 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x30000, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x4, 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:07 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(0xffffffffffffffff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:07 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x20000000) 05:29:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7, 0x30, 0x1, 0xffffffffffffff9c}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)) 05:29:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000480)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000380)='y\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r4, 0xcd, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x2, 0x1321) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000001c0)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000000540), 0x8000fffffffe) 05:29:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x2) ioctl(r0, 0x401, &(0x7f0000000140)) 05:29:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(0xffffffffffffffff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x200000000000000) 05:29:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x402) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r0) write$P9_RLERROR(r2, &(0x7f0000000040)={0x13, 0x7, 0x61c, {0xa, 'snmp_trap\x00'}}, 0x13) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x25c, 0xd0, 0xd0, 0x0, 0x0, 0xd0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xd0}, @common=@unspec=@RATEEST={0x38, 'RATEEST\x00', 0x0, {'syz1\x00', 0x78a, 0x0, 0x1000000000}}}, {{@ip={@rand_addr=0x2, @multicast2, 0xff0000ff, 0xff000000, 'bond0\x00', 'team0\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x8}, 0x0, 0x98, 0xf8}, @unspec=@CT2={0x60, 'CT\x00', 0x2, {0x18, 0x4, 0x7ed, 0x80000001, 'snmp_trap\x00', 'syz0\x00', 0x20}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b8) fallocate(r0, 0x10, 0x8, 0x1ff) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x10848c, 0x4) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x200400) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000140)={0x3, 0x7}) 05:29:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000040)) ioctl$DRM_IOCTL_VERSION(r1, 0xc0246400, &(0x7f0000000180)={0x7e84, 0x0, 0x3, 0x0, &(0x7f0000000040), 0xf4, &(0x7f0000000080)=""/244, 0x8c, &(0x7f0000000240)=""/140}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:08 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) 05:29:08 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) 05:29:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x48000000) 05:29:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(0xffffffffffffffff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x200004) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:08 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xdbd, @ipv4={[], [], @remote}, 0x6}], 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfffffffffffffc00, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) 05:29:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7ffffffffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000001180)=""/93, &(0x7f0000000300)=0x5d) r3 = socket$kcm(0xa, 0x6, 0x0) keyctl$unlink(0x9, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000001200), &(0x7f0000000240)=0xfffffffffffffeef) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f06", 0x89, 0xfffffffffffffffd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0xa10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'ip6tnl0\x00', 'teql0\x00', 'bridge_slave_1\x00', 'bridge_slave_1\x00', @link_local, [], @local, [], 0x910, 0x938, 0x980, [@among={'among\x00', 0x87c, {{0x0, 0x800, 0x0, {[], 0x3, [{[], @loopback}, {}, {[], @broadcast}]}, {[], 0x5, [{}, {[], @remote}, {}, {}, {[], @multicast1}]}}}}]}, [@common=@redirect={'redirect\x00', 0x4}]}, @common=@log={'log\x00', 0x24, {{0x0, "1f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0xa60) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00']) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000280)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801, 0x1, 0x100000001, 0x7, 0x6, 0x200}) keyctl$revoke(0x3, r4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000f80)={0x0, 0x0, @ioapic}) dup3(r1, r3, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000001080)={0x2, 0x0, @pic={0x8001, 0x11, 0x4, 0x2e28ce88, 0xff, 0x20, 0x1ff, 0x1, 0x7fff, 0x0, 0x4, 0xffffffffffff82b7, 0x9, 0x3ff, 0x5, 0x1}}) lsetxattr$trusted_overlay_opaque(&(0x7f00000004c0)='./file0\x00', &(0x7f0000001240)='trusted.overlay.opaque\x00', &(0x7f0000001280)='y\x00', 0x2, 0x2) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x4, 0x1}, &(0x7f0000000140), &(0x7f0000000500)={0x80, 0xfffffffffffffc00, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580), 0x8}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)=0x1) ioctl(r0, 0x5, &(0x7f0000000040)="88365eb98f4e5dde04e0a8f848aee68165808bf6518d97") 05:29:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x400) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000080)=@ax25={0x3, {"6f273c9f321925"}, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="212c570e58acd96287a405e3a0", 0xd}, {&(0x7f0000000140)="4c29db2a5edbfc5bea2b2ed95c80919ab8230395", 0x14}], 0x2, &(0x7f00000001c0)=[{0x78, 0x100, 0x0, "7e8ac566e6aa96f713f158cbb3aee31e670bd1e07d45365805daed5514cc9cbd7bfc39173c0ada685d28528cb6ae45b70387d993d80779b10e52d45440f00d4b6db511fe707e6809341fd8b6ce1592c02657f9e39c93641d19b2528621bc266ae62786d09c55ac52a3"}, {0x108, 0x11d, 0xfffffffffffffffa, "6321379baff3c4b3b2e5b323894f000d554410b31678e6e23276a66998be735fbbc561837bcd30d7215970af4a5475cbb5d168eac4886f032ceee643a9feaf9473984a5727199f6a72d63db60dfac39fa6edf870ddf5c2309d0d8a796d3d3736bb26adfb33cf1980eda024b73d1685d900eaf18a24546b5c72567ae1e24a9ce250d6fddbb0dbb32aa37ea276356ac2c74c843b9dd76ce58a774805b007a7b5652ecda94f02441e80f06e9737f9ace638e5cbfa94201accc8576a4958acf9464c9c0b72f2fbea07124bf651e4adeb4bdd9ae2184b59170b1e146d2d962b4461171d6d242036900e3097eb9d852b1cc019a6b5e219a93c89e3e2"}], 0x180, 0x20000804}, 0x8000) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x600) 05:29:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:08 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) 05:29:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x200000) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) 05:29:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:09 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000340)={0x85, &(0x7f0000000280)=""/133}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x40) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xda, "eb805a69214aee2c926bccfbf3832c5490f665e0c7f658fa897e39869854c13893ec53a2ccc11310b8eca541bf406cea5ed131c0725f3c0bc243d3406164bcef4d2feaddf1e4cd149a6d09473f41d865607afaf8dbbccec116c43185e202441aa01656c52cafc38c0b764bd5feb1a9eecaa060c41db6c214fec3d244638cfa9e85a5e221cc79f999db734110062ca21dc5a68fa58648c089d0dd34fd30e114814673b787f5a237c73a4b4e7b7ca1cb6ffae611b12e454536886a13f966749c9e32937cd6db592a0fc6efd4e5742c97a2bc7e027152191e81a238"}, &(0x7f0000000180)=0xe2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x100}, &(0x7f0000000200)=0x8) 05:29:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0x3, 0x20, 0xfffffffffffffffb, 'syz1\x00', 0x1}) prctl$PR_SET_TIMERSLACK(0x1d, 0xddc) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x300000000000000) 05:29:09 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4400, 0x0) write$P9_RLOCK(r1, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') 05:29:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7ffffffffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000001180)=""/93, &(0x7f0000000300)=0x5d) r3 = socket$kcm(0xa, 0x6, 0x0) keyctl$unlink(0x9, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000001200), &(0x7f0000000240)=0xfffffffffffffeef) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f06", 0x89, 0xfffffffffffffffd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0xa10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'ip6tnl0\x00', 'teql0\x00', 'bridge_slave_1\x00', 'bridge_slave_1\x00', @link_local, [], @local, [], 0x910, 0x938, 0x980, [@among={'among\x00', 0x87c, {{0x0, 0x800, 0x0, {[], 0x3, [{[], @loopback}, {}, {[], @broadcast}]}, {[], 0x5, [{}, {[], @remote}, {}, {}, {[], @multicast1}]}}}}]}, [@common=@redirect={'redirect\x00', 0x4}]}, @common=@log={'log\x00', 0x24, {{0x0, "1f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0xa60) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00']) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000280)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801, 0x1, 0x100000001, 0x7, 0x6, 0x200}) keyctl$revoke(0x3, r4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000f80)={0x0, 0x0, @ioapic}) dup3(r1, r3, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000001080)={0x2, 0x0, @pic={0x8001, 0x11, 0x4, 0x2e28ce88, 0xff, 0x20, 0x1ff, 0x1, 0x7fff, 0x0, 0x4, 0xffffffffffff82b7, 0x9, 0x3ff, 0x5, 0x1}}) lsetxattr$trusted_overlay_opaque(&(0x7f00000004c0)='./file0\x00', &(0x7f0000001240)='trusted.overlay.opaque\x00', &(0x7f0000001280)='y\x00', 0x2, 0x2) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x4, 0x1}, &(0x7f0000000140), &(0x7f0000000500)={0x80, 0xfffffffffffffc00, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580), 0x8}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)=0x1) ioctl(r0, 0x5, &(0x7f0000000040)="88365eb98f4e5dde04e0a8f848aee68165808bf6518d97") 05:29:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:09 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xcda3, 0x800) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x1ff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x200000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) fanotify_init(0x0, 0x1800) r2 = eventfd2(0x233, 0x80000) r3 = dup2(r2, r1) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000040)={0x3, 0x48fa}) r4 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x5, 0xfffffffffffffffc) fcntl$setflags(r0, 0x2, 0x1) ioctl(r4, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:09 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x7}) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x185000) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_0\x00', 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast2}, 0x4e21, 0x9, 0x4e22, 0x454, 0x2, 0xa0, 0xa0, 0x2c, r3, r4}, {0xe1, 0x2, 0x1f, 0x8, 0x3, 0x7, 0x401, 0x5}, {0x9, 0x1, 0x3, 0x4}, 0x200, 0x6e6bbf, 0x1, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d5}, 0xa, @in6, 0x3500, 0x7, 0x1, 0x9, 0xaed1, 0x1, 0xffffffffffff174a}}, 0xe8) 05:29:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x7a000000) 05:29:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x12, "f7648935da01ccd88ecec76b6ebb106f218e"}, &(0x7f00000000c0)=0x1a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0xb}, 0xf917}}, 0x96, 0x401, 0x9, 0x2c1ead3, 0xe3ff}, &(0x7f00000001c0)=0x98) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4002, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x10000, 0x4) 05:29:09 executing program 4: ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000)) 05:29:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x2000) 05:29:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7ffffffffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000001180)=""/93, &(0x7f0000000300)=0x5d) r3 = socket$kcm(0xa, 0x6, 0x0) keyctl$unlink(0x9, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000001200), &(0x7f0000000240)=0xfffffffffffffeef) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f06", 0x89, 0xfffffffffffffffd) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0xa10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'ip6tnl0\x00', 'teql0\x00', 'bridge_slave_1\x00', 'bridge_slave_1\x00', @link_local, [], @local, [], 0x910, 0x938, 0x980, [@among={'among\x00', 0x87c, {{0x0, 0x800, 0x0, {[], 0x3, [{[], @loopback}, {}, {[], @broadcast}]}, {[], 0x5, [{}, {[], @remote}, {}, {}, {[], @multicast1}]}}}}]}, [@common=@redirect={'redirect\x00', 0x4}]}, @common=@log={'log\x00', 0x24, {{0x0, "1f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0xa60) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00']) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000280)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801, 0x1, 0x100000001, 0x7, 0x6, 0x200}) keyctl$revoke(0x3, r4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000f80)={0x0, 0x0, @ioapic}) dup3(r1, r3, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000001080)={0x2, 0x0, @pic={0x8001, 0x11, 0x4, 0x2e28ce88, 0xff, 0x20, 0x1ff, 0x1, 0x7fff, 0x0, 0x4, 0xffffffffffff82b7, 0x9, 0x3ff, 0x5, 0x1}}) lsetxattr$trusted_overlay_opaque(&(0x7f00000004c0)='./file0\x00', &(0x7f0000001240)='trusted.overlay.opaque\x00', &(0x7f0000001280)='y\x00', 0x2, 0x2) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x4, 0x1}, &(0x7f0000000140), &(0x7f0000000500)={0x80, 0xfffffffffffffc00, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580), 0x8}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)=0x1) ioctl(r0, 0x5, &(0x7f0000000040)="88365eb98f4e5dde04e0a8f848aee68165808bf6518d97") 05:29:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:10 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) bind$packet(r1, &(0x7f00000002c0)={0x11, 0x1f, r2, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0xfffffd41) socketpair(0x5, 0x806, 0xf7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="58f0e57917ec1eba6f43df06a2ace3fd", 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) 05:29:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x9, &(0x7f0000000100)="3df9759a8f764227a1332efdebebffeccb87182e38707d53507e4e6d3ff1d9dd0674f346b92756161766d78c70d7446804fa840facdd0ee16d051a990ea82bd93d9a64102ebd4bb52b3f7a8b96661c8b17b6e560e5f549478417b1ece1c86daf01fa89744f2bab5ae6b8d5980e82a0cf66fe591c19f831f0e8b403d0d5ff259c3a149e56829c69592d41cffb98d14e484976467a14a29ebcd8a5b9eeea032ed284abeebf25b34f0eea0e45f36ec844a6a43a857e7c4247325a07ab35a302479fd93b1f088260d4695cb1316ac2b5f64bc082db52b1f71cf02a3542203c7b2b65c688aa651c097d59d0ce1b8f268d08a12700e3ef13eb8ceb07d0962484617e4a279bcdcad0ba69ee703ff625f6967ee79c2f5dcce411e0ca0b379539ab684f3af7de269e513d126ea54ef365ce0493d025182c94ef6c8968522e71d35a051aa2b074202e97419600a11d4d0ccc585626ed338c27") 05:29:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20200, 0x0) 05:29:10 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x7400) 05:29:10 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:10 executing program 4: ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000140)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @rand_addr=0x9}, 0x9, 0x2, 0x3, 0x8, 0x8000, 0x800, 0x8001}, 0x20) 05:29:10 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20200, 0x0) 05:29:10 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xfffffffe) 05:29:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x107040, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x3) 05:29:10 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:11 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667303", 0x0, &(0x7f000000a000)) 05:29:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20200, 0x0) 05:29:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) ioctl$void(r0, 0x5450) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2001, 0x0) 05:29:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140)={0x3, r1}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x18100, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4004240b, &(0x7f0000000080)={0x3, 0x70, 0xff, 0x4, 0x8001, 0x0, 0x0, 0x7ff, 0x20, 0x4, 0x81, 0x1, 0x3, 0x9, 0x81, 0x1, 0x7, 0x0, 0x100, 0x0, 0x5, 0xffffffffffffee0c, 0xff, 0x1, 0x100000000000, 0x6, 0x1ec0, 0x5, 0x100000001, 0xd1, 0x80000000, 0x0, 0x7fff, 0x8000, 0xdfd, 0x7, 0x7fffffff, 0x8, 0x0, 0x7c52, 0x3, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x83fb, 0x2, 0x7, 0xc3, 0xfffffffffffffffe, 0x1000}) 05:29:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x2) 05:29:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x5, 0x1, 0x0, 0x0, 0xffffffff, 0x81}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@local}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) syz_open_pts(r1, 0x2000) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x20, {0x40, 0x4, 0x6}, 0x1, r2, r3, 0x7, 0x40, 0x26, 0xa5, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7, 0x3ff, 0x788, 0x4, 0x7}}, 0xa0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f00000000c0)=0x6) [ 645.560203] kauditd_printk_skb: 22 callbacks suppressed [ 645.560219] audit: type=1804 audit(1543901351.055:314): pid=23609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/247/file0/bus" dev="ramfs" ino=86952 res=1 05:29:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x5) 05:29:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:11 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x10402, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) write$P9_RSYMLINK(r1, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x0, 0x1, 0x3}}, 0x14) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)=0x2001) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x4) [ 645.619067] audit: type=1804 audit(1543901351.065:315): pid=23615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/247/file0/bus" dev="ramfs" ino=86956 res=1 05:29:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000001100)='/dev/dri/card#\x00', 0x1, 0x100000000000000) fcntl$notify(r0, 0x402, 0x12) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xb0b02, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x5, "253d8db8e1eb87ce0ec547c34d4000cf25781abbb7b5e2472d3cb883d7ae54a2", 0x4, 0x10, 0x8, 0xd9, 0x4, 0x2, 0x4, 0xdb49}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/4096) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:11 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) [ 645.766805] audit: type=1804 audit(1543901351.255:316): pid=23631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/248/file0/bus" dev="ramfs" ino=87004 res=1 05:29:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfffffffffffffffd, 0x8000000000000000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) [ 645.847569] audit: type=1804 audit(1543901351.295:317): pid=23637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/248/file0/bus" dev="ramfs" ino=87051 res=1 05:29:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0xfeffffff00000000) 05:29:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl(r0, 0x9, &(0x7f0000000140)) 05:29:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x10000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xde, 0xd4, 0x0, 0x6, 0x1f, 0x10, "ddd6ca3c57f1a69f31eb70c96b34eade32bd01e1d562a66a194604a6505cd482c424e3ab37054e6bd08b0571ef2111bc42e98068442fd5304b7f9f91f6a0dcd0", "bb87fc03f49700b585d7da1299ff37a56ac6aba12d735ce7db7a5860f814bf26bfa333c022aea08b501350d55e9a240a5db815325ef47cac88f4dae8870cc632", "fc7839ff792b866cedc8fef7a93f37a1c2c850bf399d6a10e24599afc0364ebc", [0x9, 0x1]}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x101000) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) [ 646.034041] audit: type=1804 audit(1543901351.525:318): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/249/file0/bus" dev="ramfs" ino=88081 res=1 05:29:11 executing program 3: ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x20000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_aout(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="cf0109207b03b40fc67900001f0000004e010000810000000000000000000000b9c781b993dea0eab8e5c9b9260366c1cd41d889c509391b621086f8197ea5261b669f7f94096770478158a424b5d8c1f023cf7774f1c395c3951b97d07272d0362fbe0223d208693c81152b4ac04ab9e79cde880c1c7a3023a82c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000648900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a53ef01d74fb62c00500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002cb58b8b8b8ed38d663d2fbdef9dc300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x87b) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000001c0)=0x30) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x6, 0x19, "2a166bd46fa9d7d6669e65097cf163d4026d7cf88dd78b31361b78a279c30675685381f5063b22f602581c21c013ade100", "5864924d9296db60209f09e283224e0dbd611b7ce4040700e4566f2a0a388d49f29fb52b448ec3521fe60802518373d9353930f983f2a63e2478da3c9917a239", "5e54ac68239b62ff75d5735c67aca8dd6d447e00000000df3c1f00", [0x8000, 0x70]}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000c00)={0x1b59fad0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @broadcast}, 0x210, 0x6, 0x1, 0x3, 0x100000000, &(0x7f0000000200)='veth0_to_bond\x00', 0xb, 0x2, 0x5}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000280)=""/203) mq_getsetattr(r2, &(0x7f0000000040)={0x8, 0x141e, 0x7, 0x3, 0x5, 0x2, 0x20}, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000c80)=0x20, 0x4) [ 646.120412] audit: type=1804 audit(1543901351.565:319): pid=23664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/249/file0/bus" dev="ramfs" ino=88089 res=1 05:29:12 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673e4", 0x0, &(0x7f000000a000)) 05:29:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x100) 05:29:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x101500) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x60002019}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000000c0)=0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) 05:29:12 executing program 3: ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) readahead(r0, 0x8, 0x8) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) [ 646.734917] audit: type=1804 audit(1543901352.225:320): pid=23687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/250/file0/bus" dev="ramfs" ino=88145 res=1 05:29:12 executing program 3: ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:12 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000001, 0x80) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdir(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffd) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0/bus\x00', 0xd) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:12 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x200000, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="3a000000e9c2d9a3798dbbd7b8e9aa7afb5f21644834263da672d0be79cde8ca24bc41176e705444b5d6f3270b70967962cd1897a995f0aa0b9ddb989115"], &(0x7f00000001c0)=0x42) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x66, 0x6, 0x8001}, &(0x7f0000000240)=0x10) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x10000000000000, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$TUNATTACHFILTER(r4, 0x400854d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x0, 0x8, 0x7, 0x8}, {0xddf, 0x81, 0x7f, 0x7}, {0xfffffffffffff001, 0x2, 0x7, 0x1}, {0x80, 0x7, 0xfffffffffffffffe, 0x1000}, {0x4, 0x8e, 0x2, 0x100}]}) [ 646.781790] audit: type=1804 audit(1543901352.235:321): pid=23700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/250/file0/bus" dev="ramfs" ino=88148 res=1 05:29:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='status\x00') ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:12 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) [ 646.936425] audit: type=1804 audit(1543901352.425:322): pid=23712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/251/file0/bus" dev="ramfs" ino=88190 res=1 05:29:12 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) [ 647.003170] audit: type=1804 audit(1543901352.445:323): pid=23715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/251/file0/bus" dev="ramfs" ino=88193 res=1 05:29:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 05:29:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x7, 0x7}}, 0x30) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x121000, 0x1) getxattr(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e6b657972696e67242576626f786e657430626465762b5b23eed7b3"], &(0x7f00000001c0)=""/226, 0xe2) 05:29:12 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x89, &(0x7f0000000340)="e72afa690b988858fbdf7aa71e481648cb38af0c9530a34ef63ba89d3a6dc144ffce9e530ce5d9c11b61cc294a815711ea2535614076a41e08e2cf33073d899c51e1ccb27d702adaf7201a23d3276a24b311ee000000000000000000000000327ae155c80afa0827eb4e56ffe273cb3a62c71cdc180c87e0364223c7aeceff76e1f3d3449c7d707e6a59126712f77f") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0xed08fe6475535ee0, 0x0) connect$l2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x1, 0x3, {0xa, 0x4e24, 0x6, @local, 0x3eb283cd}}}, 0x32) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000200)={r2}) fcntl$addseals(r0, 0x409, 0x4) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x80000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x14, 0x9, 0x77}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000100)={r4, 0x6}, &(0x7f0000000140)=0x8) 05:29:12 executing program 5: r0 = syz_open_dev$mouse(&(0x7f00000012c0)='/dev/input/mouse#\x00', 0x60, 0x8000) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xffffdfff80000003, 0x8000000) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) r2 = add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="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", 0x1000, 0xfffffffffffffff9) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001340)={&(0x7f0000001300)=""/61, 0x20000, 0x1800, 0x2}, 0x18) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x00', r2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001240)='/dev/dlm-monitor\x00', 0x2800, 0x0) connect$pptp(r3, &(0x7f0000001280)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, 0x0) 05:29:12 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:12 executing program 0: r0 = memfd_create(&(0x7f0000000000)='ramfs\x00', 0x1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0/bus\x00', &(0x7f00000001c0)=""/219, 0xdb) creat(&(0x7f0000f66ff4)='./file0\x00', 0x0) prctl$PR_GET_SECCOMP(0x15) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xa520, 0x4000) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:13 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7, 0x0) 05:29:13 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10000, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000080)={[], 0x7, 0xffff, 0x6, 0x0, 0xffffffffffffffe0, 0xf002, 0x0, [], 0xb73}) 05:29:13 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0/bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='fuseblk\x00', 0x4, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x400}}], [{@measure='measure'}]}}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)={0x9}) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7, 0x0) 05:29:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffffeffffffb0, &(0x7f00000004c0)="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") r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0x2, 0x6, "8bf99281c5326b44cc468f4e8009bf2b641548868367fc4ce3a84786b25115447fa95f73a4e5bd6ebf428b15fcc92cd01ee7b39b99080d6e65c470f2cf1e7475a1bc7d3ea99b40dbe5599bf3aadb4240dde3dfa2ad9de3fbefc4491f4d44606a42fc60ac90d6d726b1dc3dff6bcc9bc6670dd033fa0a04ea1c87416ae68cdb89a52b1a381d41addbee366194011ec42200078eb21e5358fb393f99c01929b19cf73d339368211762d993d7536a4e44d66c25f88148844d48a49ae71623277c278ffe787729e9ce0910776f168e4314156b15df9cbf811d6b3de07156045e4795fa240049675860c2d617c86c687fe7a0b715faf57d509bd5ab3fbc3e72ad3be0", 0x14, 0x1, 0x10000, 0x9, 0x101, 0x3, 0x7fffffff}, r2}}, 0x128) 05:29:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:13 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) getdents64(r0, &(0x7f0000000000)=""/74, 0x4a) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:13 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:14 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\t', 0x0, &(0x7f000000a000)) 05:29:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x7, 0x0) 05:29:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4800000200000001, 0x101000) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000180)) ioctl(r0, 0xeb27, &(0x7f0000000140)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x105002) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) 05:29:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x20) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:14 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:14 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:14 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0xba, 0xf074, 0x401, 0x9, [], [], [], 0x9, 0x0, 0xffffffff, 0x0, "e7523fe8f529a16935e29850de0f9df0"}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000440)={0x200, 0x800, 0x8, 0xffff, [], [], [], 0x100000001, 0x6, 0x2, 0x4, '\x00\b\x00'}) ioctl$UI_SET_PHYS(r0, 0x4004556c, &(0x7f0000000000)='syz1\x00') r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)="484da2dc71a3c7290c739e441fda57ad9c1f8b1290458eea4f94822597a56be725260dd5a95e69e3a8403899b71f1fb6bbc0e665e9deb012af15d033cb877c072e80cf51eefbccda78be687309d41602e39d744b6e754c120a9616bf0fa68a924903d3a88a254d868c08dcbc10abf95963b251aca78e33fce3b32f596c504d00174f1f9ecc9829dfe3537f0b3e8770f3", 0x90) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) write(r1, &(0x7f0000000300)="0fd1293d838823552fd3a5ea2ed93eeefed869b0af217e158e3ebfcd7480d40be581", 0x22) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0xfff, 0xfffffffffffffffa}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:14 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3ff, 0xfffffffffffffffa, 0x4], 0x3, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x1, r4, 0x0, r5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080)="b58b62185b625e601f4b22ff8108053df961041dab424d508735596da1946a0252587eddf0dc7f3f8700e23a6ab24eabc39497d19e526ada1a5b3eddcda3a8b864987c1e7aab1ed26b8be32881557041077e15cd622929443ae0eee1b2237dbad1c6bc5c89812d9f26415adcfdc435c57f4c46f6feaeae809ef1de940c66ff1d08826174c61bab9fd0a5d039e91d3c7a71c81945e510e47ac8924b9f746671e72773012de48f89f8d1efc51c66cfc5b56c17a04bd10fedee3c7fc43a14849beb7e0fdf9f51f13f1f612e", &(0x7f0000000340)="8bd9e169298976add4fc30b121b5617c384e91d1a8e3f580ed4fe22015e857abb86d9382db9aab27d0ec35bb69d3ec4715eca573f5e21463a2a6c0188774c8d5a9cd6fdc3f3a6951dfe3d8e142cfe7d57aed968b0299203d360ce88c70487e11566ee788476ef5b71001d390740b7ecf5e71b972d11566341db28441de3cc73250d281c967af5fd37b57c410ad9e2beb3339d57df8583833ff14c4959a131c884583061a3a41f7204bc984e520d026d00d931f810eaaba7dfa255b2198c492787bab4a55c691ca9639daa6ab210075cced264ec3a264db615917cb5da55a5395edcc5017a873dd2e69", 0x2}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000001c0)={r3}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:14 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:14 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x488000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc044565d, &(0x7f0000000040)={0x18cc, 0xf, 0x4, 0x822, {}, {0x0, 0xc, 0x4, 0x3, 0xffffffffb09e3e11, 0x0, "fe7cd91f"}, 0x53, 0x2, @fd=r0, 0x4}) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0245628, &(0x7f0000000100)={0x9, 0x40, 0x59f9, [], &(0x7f00000000c0)=0xd5}) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) 05:29:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f00000000c0)={0x5, 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000040)={0xb6, 0x0, 0x1, 0x8}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0086438, &(0x7f0000000080)={0x3, r1}) 05:29:14 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x140) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) 05:29:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4000, 0x0) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) 05:29:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:15 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) 05:29:15 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) ioctl(0xffffffffffffffff, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) 05:29:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x1c9f}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000002c0)=0xb) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x12200, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x849, 0x8, 0x6, 0x66fd, 0x7f, 0x0, 0xffff, 0xfff, 0x80, 0xffffffff, 0x4, 0xfff, 0x80000001}, {0x180000, 0x5, 0x100, 0x3, 0x397f, 0x8, 0x3, 0xfff, 0x5, 0x4, 0x1, 0x0, 0x7}, {0x7, 0x80000000, 0x3, 0x17e, 0x100000000, 0x4, 0x81, 0x22e, 0x8001, 0x0, 0x800, 0x2, 0xa029}], 0x3}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:15 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x1) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4200, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x2, 0xd9, &(0x7f0000000080)="7413019ef6c74795d1e9a509bdb9df1a829a2187fb36d0a2543a8769db0b436d190a1fdad11dcd8fcf42d4731cc590462b994ad92b28c9801467bf6b161ef427a8e309a2fd789130b987ce781cf3d1ba36b40412ac272410a3c51a4f33ecc0690f52fa1ac2d759cb264827e0eec5bf92ae1bf26f114707de12ec23fb643277e9841a03450b9c194f4d3af96007212215898c2a2dc9bc65a1107654e7068a339638b0a9fa7c19854bddb4f1b80a1a151da5a5307c841802dff52a49319c24be2d0dbe6c48d0ff410a7abffaea729f50904f255c9c7b79ef2f18"}) 05:29:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:15 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) ioctl(0xffffffffffffffff, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:15 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:15 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667303", 0x0, &(0x7f000000a000)) 05:29:15 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x112, 0x9, 0x400, 0x7f, 0x2, 0x3e, 0x1, 0x352, 0x38, 0x33e, 0xf7, 0x0, 0x20, 0x1, 0x85, 0x10000, 0x7}, [{0x0, 0x5b9, 0x7, 0x2500000000000, 0x88, 0x3, 0x6, 0x5}, {0x60000000, 0x5, 0x6, 0xfffffffffffffffc, 0x80000000, 0x400, 0x2, 0x100000001}], "091fa64e1427dc8125c502463e93966ca4e0c6bb58f9a22c2ba79b14a6935211400c4c584711511e82a939bc96a876f8237cf5346ad9a8adf5dc956de3e4f3305c85087442cf55b64228341bfa0c125cef942e2c769d41280d6c34d02d6df1f1b947eb484df6150e7d07c81f82d4c636c3e8a5ddaa11385a83583c4086bd75694b7aec846cd37d8d272df3293a491f5e6872c832c84719440dcb350fd0d53a7009d057698412037dfe", [[]]}, 0x221) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) 05:29:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x1cf, 0x3ff, 0x4, 0x1e6, 0x2d7, 0x1, 0x326, 0x5}, "e287b2dcc86a0a8aa8887314fab1deded3ce0d42b427a0b4dd2ad72ffd2a402d1c52275aa3c68530ce9f5f0b36d76636c8656cdec442f2b972212da533b5761ec92dc8c39a32d6e9017f28e38bb7003435c5cd3da050229f070020fa8cd3410641ce73efa274c46c01b7bfbfef3e825f43d184d27f878b61563ad8c9611d1b043cc6ebaccec3a47e6225546aeeddc9d5c870cac62e3d90c6222be34d227a06105256cdbc61a2bcfe7084fc1b58c1bcce57216fe749d4", [[], [], [], [], []]}, 0x5d6) socket$inet6_tcp(0xa, 0x1, 0x0) 05:29:15 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) ioctl(0xffffffffffffffff, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:16 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:16 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xda97, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'ppp0'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}, {}], 0xa, "2d4b77220031715b75f458f6becb8598f420fe6769228b10af206d1ad09263138ff1c18c900e7f39dd6ced48eabfce733aef3ef4fc4c94b6a7fe72edab3cb8aa65d781a7eb51ec28484b8db90d3aac937b62316551a259e4d8687f1e"}, 0x9d) 05:29:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:16 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40800, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0186404, &(0x7f0000000240)={&(0x7f0000ffa000/0x4000)=nil, 0x9, 0x2, 0x24, &(0x7f0000ffb000/0x4000)=nil, 0x4}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) stat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xc0, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffeb8a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r2}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) setuid(r3) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x50480, 0x1d7) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="89307fc9f3837aaa8b35a9e789a6c54469b15da0795c0755611fe5d7e8522201c82f8b64d9830ac155f7606ecf1dcb5b17cc1e5172a25e6f", @ANYRES64=r0]], 0x1, 0x1) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x4c00000000000000, 0x0) 05:29:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) [ 650.642674] QAT: Invalid ioctl [ 650.660784] kauditd_printk_skb: 18 callbacks suppressed [ 650.660799] audit: type=1804 audit(1543901356.155:342): pid=23960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/263/file0/bus" dev="ramfs" ino=87790 res=1 05:29:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) [ 650.707861] QAT: Invalid ioctl 05:29:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 650.761313] audit: type=1804 audit(1543901356.235:343): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/263/file0/bus" dev="ramfs" ino=88751 res=1 05:29:16 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:16 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x410000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() chown(&(0x7f00000000c0)='.\x00', r2, r3) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 650.846535] audit: type=1804 audit(1543901356.245:344): pid=23967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/newroot/724/file0/bus" dev="ramfs" ino=87815 res=1 [ 650.934319] audit: type=1804 audit(1543901356.425:345): pid=23981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/264/file0/bus" dev="ramfs" ino=87857 res=1 05:29:16 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:16 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:16 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x8000, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) [ 651.460378] audit: type=1804 audit(1543901356.955:346): pid=23995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/265/file0/bus" dev="ramfs" ino=88819 res=1 05:29:17 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:17 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/bus\x00', 0x2) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x26001, 0x0) 05:29:17 executing program 4 (fault-call:5 fault-nth:0): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 651.626973] FAULT_INJECTION: forcing a failure. [ 651.626973] name failslab, interval 1, probability 0, space 0, times 0 [ 651.648350] CPU: 0 PID: 24011 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #265 [ 651.655751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.665128] Call Trace: [ 651.667744] dump_stack+0x244/0x39d [ 651.671407] ? dump_stack_print_info.cold.1+0x20/0x20 [ 651.676623] ? debug_smp_processor_id+0x1c/0x20 [ 651.681307] ? perf_trace_lock+0x14d/0x7a0 [ 651.685560] should_fail.cold.4+0xa/0x17 [ 651.689637] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 651.694763] ? zap_class+0x640/0x640 [ 651.698496] ? find_held_lock+0x36/0x1c0 [ 651.702582] ? __lock_is_held+0xb5/0x140 [ 651.706765] ? tcpm_port_type_set+0x278/0x280 [ 651.711432] ? perf_trace_sched_process_exec+0x860/0x860 [ 651.716903] ? trace_hardirqs_on+0xbd/0x310 [ 651.721237] __should_failslab+0x124/0x180 [ 651.725480] should_failslab+0x9/0x14 [ 651.729286] kmem_cache_alloc_trace+0x2d7/0x750 [ 651.733960] ? __local_bh_enable_ip+0x160/0x260 [ 651.738633] ? __local_bh_enable_ip+0x160/0x260 [ 651.743368] virtio_transport_alloc_pkt+0xd1/0xa80 [ 651.748330] ? _raw_spin_unlock_bh+0x30/0x40 [ 651.752751] ? trace_hardirqs_off_caller+0x310/0x310 [ 651.757864] ? virtio_transport_do_socket_init+0x540/0x540 [ 651.763491] ? virtio_transport_get_credit+0xd8/0x100 [ 651.768686] ? virtio_transport_get_credit+0xd8/0x100 [ 651.773901] ? __local_bh_enable_ip+0x160/0x260 [ 651.778580] ? _raw_spin_unlock_bh+0x30/0x40 [ 651.782998] virtio_transport_send_pkt_info+0x200/0x460 [ 651.788376] virtio_transport_connect+0x17c/0x220 [ 651.793232] ? virtio_transport_send_pkt_info+0x460/0x460 [ 651.798773] ? vsock_auto_bind+0xa9/0xe0 [ 651.802848] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 651.808397] vsock_stream_connect+0x4ed/0xe40 [ 651.812906] ? vsock_dgram_connect+0x500/0x500 [ 651.817510] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 651.823052] ? aa_label_sk_perm+0x91/0x100 [ 651.827364] ? finish_wait+0x430/0x430 [ 651.831281] ? aa_af_perm+0x5a0/0x5a0 [ 651.835121] ? apparmor_socket_connect+0xb6/0x160 [ 651.839973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 651.845523] ? security_socket_connect+0x94/0xc0 [ 651.850294] __sys_connect+0x37d/0x4c0 [ 651.854195] ? __ia32_sys_accept+0xb0/0xb0 [ 651.858474] ? __sb_end_write+0xd9/0x110 [ 651.862547] ? fput+0x130/0x1a0 [ 651.865838] ? do_fast_syscall_32+0x150/0xfb2 [ 651.870341] ? do_fast_syscall_32+0x150/0xfb2 [ 651.874848] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 651.879456] ? trace_hardirqs_on+0xbd/0x310 [ 651.883776] ? __ia32_sys_read+0xb0/0xb0 [ 651.887850] ? __perf_sw_event+0x77/0x90 [ 651.891911] ? entry_SYSENTER_compat+0x70/0x7f [ 651.896494] ? trace_hardirqs_off_caller+0x310/0x310 [ 651.901654] ? __do_page_fault+0x491/0xe60 [ 651.905900] __ia32_sys_connect+0x72/0xb0 [ 651.910071] do_fast_syscall_32+0x34d/0xfb2 [ 651.914441] ? do_int80_syscall_32+0x890/0x890 [ 651.919031] ? entry_SYSENTER_compat+0x68/0x7f [ 651.923628] ? trace_hardirqs_off_caller+0xbb/0x310 [ 651.928648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 651.933518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 651.938373] ? trace_hardirqs_on_caller+0x310/0x310 [ 651.943417] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 651.948460] ? prepare_exit_to_usermode+0x291/0x3b0 [ 651.953505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 651.958368] entry_SYSENTER_compat+0x70/0x7f [ 651.962776] RIP: 0023:0xf7fcaa29 05:29:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) [ 651.966145] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 651.985061] RSP: 002b:00000000f5fc60cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 651.992782] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000200 [ 652.000053] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.007329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.014605] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 652.021890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:29:17 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673f4", 0x0, &(0x7f000000a000)) 05:29:17 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:17 executing program 4 (fault-call:5 fault-nth:1): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5840, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) [ 652.394117] audit: type=1804 audit(1543901357.885:347): pid=24030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/267/file0/bus" dev="ramfs" ino=88898 res=1 05:29:17 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="6f0000a30000000000", 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000001c0)={0x89d, {{0xa, 0x4e20, 0x7, @loopback, 0x81f6}}}, 0x84) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x6, 0x2, 0x1, 0x800}, {0xfff, 0xffffffff, 0xfffffffffffffff7, 0x20}, {0xd52, 0x3, 0x51d6, 0x1}, {0x3, 0x4, 0x0, 0x92f}, {0x4, 0x1f, 0x0, 0x40}, {0x3, 0x100000001, 0x7, 0x81}, {0xffffffff, 0xea6b, 0x80}]}) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 652.462809] audit: type=1804 audit(1543901357.935:348): pid=24039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/267/file0/bus" dev="ramfs" ino=88906 res=1 05:29:18 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:18 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) [ 652.601955] audit: type=1804 audit(1543901358.095:349): pid=24054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/268/file0/bus" dev="ramfs" ino=88942 res=1 05:29:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='\x00', 0x1, 0x1) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0/bus\x00', 0xc, 0x2) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="df000000c4b872ed0d440a02bb5853befe6e2a022be371383890b116d4e80eb7dc588d1acd8fc1fed62de72b11f252917af9d6048191626a0e1779d484fab81ad5e3d37c731219d8f76c278535f273219edbbd391ddda416be90cdede1aea58a29185a5828e5b1afcb07343deae02e88dfb42f37d4eaaaf0a8f570d1fef8f8be1610619ec1a7710258fb851c51d079f2230402d7af025eb7d4ef3c0bba6f114fd7fa7f96b1b38d6457e97e2776ee54c7673593e1427f4af0739d83e4bb3f5680c7ecccc380fbd963d382be788766a0f2a7daad4da00700000000000000000000000000"], &(0x7f0000000100)=0xe7) [ 652.769807] audit: type=1804 audit(1543901358.265:350): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/269/file0/bus" dev="ramfs" ino=89112 res=1 [ 652.801811] audit: type=1804 audit(1543901358.265:351): pid=24072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/269/file0/bus" dev="ramfs" ino=89114 res=1 [ 655.353987] FAULT_INJECTION: forcing a failure. [ 655.353987] name fail_futex, interval 1, probability 0, space 0, times 1 [ 655.366067] CPU: 1 PID: 24031 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #265 [ 655.373429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.382787] Call Trace: [ 655.385406] dump_stack+0x244/0x39d [ 655.389025] ? dump_stack_print_info.cold.1+0x20/0x20 [ 655.394215] should_fail.cold.4+0xa/0x17 [ 655.398268] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 655.403362] ? __lock_acquire+0x62f/0x4c20 [ 655.407624] ? mark_held_locks+0x130/0x130 [ 655.411870] ? print_usage_bug+0xc0/0xc0 [ 655.415929] ? lock_unpin_lock+0x4a0/0x4a0 [ 655.420155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 655.425693] ? check_preemption_disabled+0x48/0x280 [ 655.430703] ? lock_unpin_lock+0x4a0/0x4a0 [ 655.434928] ? check_preemption_disabled+0x48/0x280 [ 655.439937] ? lock_is_held_type+0x210/0x210 [ 655.444334] ? __lock_acquire+0x62f/0x4c20 [ 655.448562] get_futex_key+0x127d/0x21b0 [ 655.452637] ? rb_erase_cached+0xc78/0x3720 [ 655.456947] ? fixup_owner+0x250/0x250 [ 655.460819] ? rb_next+0x140/0x140 [ 655.464359] ? rb_erase_cached+0xc78/0x3720 [ 655.468704] ? print_usage_bug+0xc0/0xc0 [ 655.472751] ? rb_next+0x140/0x140 [ 655.476277] ? __lock_acquire+0x62f/0x4c20 [ 655.480498] ? print_usage_bug+0xc0/0xc0 [ 655.484558] ? __lock_acquire+0x62f/0x4c20 [ 655.488827] ? __lock_acquire+0x62f/0x4c20 [ 655.493058] ? mark_held_locks+0x130/0x130 [ 655.497280] ? lock_unpin_lock+0x4a0/0x4a0 [ 655.501499] ? perf_trace_lock+0x14d/0x7a0 [ 655.505723] ? check_preemption_disabled+0x48/0x280 [ 655.510742] ? mark_held_locks+0x130/0x130 [ 655.514979] ? print_usage_bug+0xc0/0xc0 [ 655.519030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 655.524572] ? check_preemption_disabled+0x48/0x280 [ 655.529579] ? debug_smp_processor_id+0x1c/0x20 [ 655.534235] ? perf_trace_lock+0x14d/0x7a0 [ 655.538460] ? lock_is_held_type+0x210/0x210 [ 655.542862] ? mark_held_locks+0x130/0x130 [ 655.547104] ? zap_class+0x640/0x640 [ 655.550818] ? mark_held_locks+0x130/0x130 [ 655.555071] ? __update_load_avg_se+0xae0/0xae0 [ 655.559784] ? __lock_is_held+0xb5/0x140 [ 655.563863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 655.569396] ? find_held_lock+0x36/0x1c0 [ 655.573455] ? print_usage_bug+0xc0/0xc0 [ 655.577507] ? print_usage_bug+0xc0/0xc0 [ 655.581556] ? free_one_page+0xcae/0x1700 [ 655.585687] ? print_usage_bug+0xc0/0xc0 [ 655.589785] ? lock_downgrade+0x900/0x900 [ 655.593922] ? print_usage_bug+0xc0/0xc0 [ 655.597975] ? kasan_check_read+0x11/0x20 [ 655.602116] futex_wake+0x1ac/0x760 [ 655.605732] ? get_futex_key+0x21b0/0x21b0 [ 655.609977] ? __lock_acquire+0x62f/0x4c20 [ 655.614203] do_futex+0x2e4/0x26d0 [ 655.617731] ? mark_held_locks+0x130/0x130 [ 655.621954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 655.627481] ? exit_robust_list+0x280/0x280 [ 655.631789] ? debug_smp_processor_id+0x1c/0x20 [ 655.636448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 655.641978] ? check_preemption_disabled+0x48/0x280 [ 655.646984] ? debug_smp_processor_id+0x1c/0x20 [ 655.651637] ? perf_trace_lock+0x14d/0x7a0 [ 655.655865] ? zap_class+0x640/0x640 [ 655.659570] ? lock_is_held_type+0x210/0x210 [ 655.663968] ? find_held_lock+0x36/0x1c0 [ 655.668018] ? zap_class+0x640/0x640 [ 655.671721] ? find_held_lock+0x36/0x1c0 [ 655.675778] ? find_held_lock+0x36/0x1c0 [ 655.679832] ? __might_fault+0x12b/0x1e0 [ 655.683883] ? lock_downgrade+0x900/0x900 [ 655.688018] ? lock_release+0xa00/0xa00 [ 655.691976] ? perf_trace_sched_process_exec+0x860/0x860 [ 655.697485] mm_release+0x46a/0x5f0 [ 655.701113] ? mm_access+0x160/0x160 [ 655.704812] ? trace_hardirqs_off_caller+0x310/0x310 [ 655.709905] ? _raw_spin_unlock_irq+0x60/0x80 [ 655.714387] ? acct_collect+0x70c/0x860 [ 655.718349] do_exit+0x570/0x26d0 [ 655.721788] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 655.726361] ? mm_update_next_owner+0x990/0x990 [ 655.731020] ? print_usage_bug+0xc0/0xc0 [ 655.735088] ? free_unref_page+0x960/0x960 [ 655.739319] ? kasan_check_write+0x14/0x20 [ 655.743544] ? finish_task_switch+0x615/0x910 [ 655.748027] ? __switch_to_asm+0x40/0x70 [ 655.752106] ? __lock_acquire+0x62f/0x4c20 [ 655.756332] ? __switch_to_asm+0x34/0x70 [ 655.760382] ? __switch_to_asm+0x40/0x70 [ 655.764451] ? __switch_to_asm+0x34/0x70 [ 655.768501] ? __switch_to_asm+0x40/0x70 [ 655.772568] ? __switch_to_asm+0x34/0x70 [ 655.776613] ? __switch_to_asm+0x40/0x70 [ 655.780662] ? __switch_to_asm+0x34/0x70 [ 655.784706] ? __switch_to_asm+0x34/0x70 [ 655.788753] ? __switch_to_asm+0x40/0x70 [ 655.792800] ? __switch_to_asm+0x34/0x70 [ 655.796848] ? mark_held_locks+0x130/0x130 [ 655.801098] ? __sched_text_start+0x8/0x8 [ 655.805235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 655.810765] ? check_preemption_disabled+0x48/0x280 [ 655.815767] ? debug_smp_processor_id+0x1c/0x20 [ 655.820446] ? perf_trace_lock+0x14d/0x7a0 [ 655.824669] ? lock_is_held_type+0x210/0x210 [ 655.829088] ? zap_class+0x640/0x640 [ 655.832807] ? memset+0x31/0x40 [ 655.836099] ? find_held_lock+0x36/0x1c0 [ 655.840160] ? get_signal+0x95b/0x1980 [ 655.844032] ? _raw_spin_unlock_irq+0x27/0x80 [ 655.848513] ? _raw_spin_unlock_irq+0x27/0x80 [ 655.852998] do_group_exit+0x177/0x440 [ 655.856918] ? trace_hardirqs_off_caller+0x310/0x310 [ 655.862067] ? __ia32_sys_exit+0x50/0x50 [ 655.866163] get_signal+0x8b0/0x1980 [ 655.869888] ? ptrace_notify+0x130/0x130 [ 655.873939] ? vsock_dgram_connect+0x500/0x500 [ 655.878526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 655.884050] ? aa_label_sk_perm+0x91/0x100 [ 655.888295] ? finish_wait+0x430/0x430 [ 655.892189] ? aa_af_perm+0x5a0/0x5a0 [ 655.895980] do_signal+0x9c/0x21c0 [ 655.899508] ? apparmor_socket_connect+0xb6/0x160 [ 655.904341] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 655.909869] ? setup_sigcontext+0x7d0/0x7d0 [ 655.914178] ? __sys_connect+0x1d1/0x4c0 [ 655.918250] ? exit_to_usermode_loop+0x8c/0x380 [ 655.922907] ? exit_to_usermode_loop+0x8c/0x380 [ 655.927561] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 655.932144] ? trace_hardirqs_on+0xbd/0x310 [ 655.936454] ? __sb_end_write+0xd9/0x110 [ 655.940500] ? do_fast_syscall_32+0xcd5/0xfb2 [ 655.944982] ? fput+0x130/0x1a0 [ 655.948247] ? do_fast_syscall_32+0x150/0xfb2 [ 655.952726] ? do_fast_syscall_32+0x150/0xfb2 [ 655.957220] exit_to_usermode_loop+0x2e5/0x380 [ 655.961794] ? __bpf_trace_sys_exit+0x30/0x30 [ 655.966291] ? __do_page_fault+0x491/0xe60 [ 655.970521] do_fast_syscall_32+0xcd5/0xfb2 [ 655.974831] ? do_int80_syscall_32+0x890/0x890 [ 655.979404] ? entry_SYSENTER_compat+0x68/0x7f [ 655.983977] ? trace_hardirqs_off_caller+0xbb/0x310 [ 655.988981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 655.993808] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 655.998641] ? trace_hardirqs_on_caller+0x310/0x310 [ 656.003664] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 656.008669] ? prepare_exit_to_usermode+0x291/0x3b0 [ 656.013675] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 656.018511] entry_SYSENTER_compat+0x70/0x7f [ 656.022905] RIP: 0023:0xf7fcaa29 [ 656.026259] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 656.045147] RSP: 002b:00000000f5fc60cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a 05:29:21 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:21 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:21 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)) 05:29:21 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) [ 656.052842] RAX: fffffffffffffffc RBX: 0000000000000004 RCX: 0000000020000200 [ 656.060107] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 656.067364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 656.074617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 656.081876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:29:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) [ 656.122229] audit: type=1804 audit(1543901361.615:352): pid=24082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/270/file0/bus" dev="ramfs" ino=88994 res=1 05:29:21 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='\x00', 0xfffffffffffffffc) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f00000000c0)=0x8) pipe2(&(0x7f0000000000), 0x80000) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:21 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 656.197477] audit: type=1804 audit(1543901361.655:353): pid=24088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/270/file0/bus" dev="ramfs" ino=89007 res=1 05:29:21 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x4000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4854, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:21 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x800) sendmsg$kcm(r0, &(0x7f0000002a80)={&(0x7f0000000240)=@can={0x1d, r1}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="2c207b9851b5f7988fbda4f5146e05257256b9ecbc292663c3c7aa64e7b281ee20c2f10ccdd2da4ad10fc5d375250d050585d2533b739b0bc62cbb58d2b3ff4f6838aa60c9f667d386a72e1a9f5035647b5f3e2016eb3bf18d8f86fa8f8f1ee2d271d26c213b2c94762d5c3a5862e16e314e7875b46ab5be52a7a79442b5a3c2ad000e94095b1b18dcbd7cfe7507dfa040fcca75fd87de9176e14ca417e3924e5cb49c564fb8fdce0fb0171d3f0f13667e5f11cdf9ecc41cb43df1fdddb01f5db274d1f9a253b8e7f81e84cc9a92771c00292773b1db15b04e75", 0xda}, {&(0x7f00000003c0)="55caf2ae64c20212fd3d90", 0xb}, {&(0x7f0000000400)="504679996cff05088ad12fe1640397f183347f783a72e77bd932bfb332bb0d8b21f328aaadada9948eb229ac64c015f29768350ce1e3ab739790d2e7b731b0a9590a71dc9a4978ead6be7d9de27f0efaa602fd04c1343c5abdfd2b1c907b982bb45191c90fb007f951d2cc4e6259a3f8ff9491743967530f407ecebf2b2d9849f60bdf671961692286f9859216129ea34a8e20ca17021391f7bfa5dd52413662e6ebc27d8f8f7181096e6c2f9ed65545e39e68aeba4e8e9cd2c415db4f42c7555fcd8059fcdb5ddd7a", 0xc9}, {&(0x7f0000000500)="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", 0xff}, {&(0x7f0000000600)="c9c1e4eeeb622c6eadc9feb52eea76c917915b3de21f802bd9b8d9ca19ab6e4ad04703c490fe4d08e3869a19aa6026d5d749b9628aae345905745f11162829171e8def60e719867902e8152b1705be60904378666e0a4b781ffbd4d0d64d93457ad4bf8abf73651543be4c5e918ec3e2f74940f6b8d76bfe8e690a20d5a08e5f8e2014c84340dbf80e5bb6a083f057cc1ceb118b9991df6bb28718c708251abdad0da2749c0fddd921804d497f097ab86823c56133c819a0c4bb5274b32d25f312950142797b9a9203b8d09e515c64339c3108a285271601c529346df7b6", 0xde}], 0x5, &(0x7f0000000740)=[{0xa0, 0x0, 0x5, "64f787eb2c3caab1e0c663f9c2edc18ba4174e389a583d040476a80d337d28cd2d827c2c340128bfcdc35605c4959134c3834745fd156d61207c07f92194bdd0787fa86ceda5adb732c541208ebf89edf4074848367c1abbe8211144fdc2f6d73975ed656af16c7d5b6fbae4f4e3567cea6c2ab3c115626a4329b54c6b8e9e7f60c1ed7976450688c2fc2ac74857a6004d94"}, {0xb0, 0x11f, 0xfff, "a1d40b7277370c76dff108a56ebe8075ed4f33697c057347b558b29f0d46969948a610adf1a087adb8263c80a1832c5af413437cf75ecc6481cc072e0ff9097c43b49d5e3cfc850e4e6f0dc7f236a6fe2f34c0affffeae312d83ebd114475d51f5831d72d9e115a3498065040327805e3ab632c82e0fe33afb325a29ef8d0c926d7c2d5898f04a719f2e8f9d55bdf336d2b4fe1f0cff58685b91dee0170b818e97"}, {0x48, 0x11d, 0x3, "d3304cebea35e2501cd727e8c891d4edca48fd8d3cecfeefbcee3b5e8970a9943a7b564433b3506b47d2e652a2ad54311957a17dd8a7bda826483578"}, {0x100c, 0x117, 0x0, "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"}, {0x24, 0x117, 0xff, "748996c2a0c4a7e0e6e3c6747411f6156914487734ae511b"}, {0x28, 0x19f, 0x6, "a0ba07acf339420e11c7330d9a814543c18201b9b86135c1a678"}, {0x1c, 0x3a, 0x6, "033a9eaf6181274a14167ae6e131a854"}, {0x30, 0x112, 0x7, "bb6e71f61956776f71640f236446cf50daa5129061f1ec6a93d10b9b13dd32cdaa4a4d"}, {0x100c, 0x112, 0x80000001, "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"}, {0xc0, 0x104, 0x0, "effc021fc113cdcef441e5e2f8e7f883139fd9dbb92d5d6719e3f540bc85e7412288f4d5fdb71624338b5249e83bf6838f9867a84121a7e5339f3d136a7142ab66a698da174709bdd3bc7267517381d00a7c3322b2a2e9fe61f7c743088b4dbae3d477d38a6133644e1fc443eb7f52afee4430667f57a7dbe4e2518c21bbf2bcaf0e5a2dbc227f1fa0fdd0e58632b7c82049687a2c96bcc772596d63ed26d89b8af87b1dd3ccb913399862e7a96fd2cb947098"}], 0x2308, 0x20000000}, 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:21 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) [ 656.512045] audit: type=1804 audit(1543901362.005:354): pid=24117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/272/file0/bus" dev="ramfs" ino=89067 res=1 05:29:22 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e6673ff", 0x0, &(0x7f000000a000)) 05:29:22 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xffffffff00000000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:22 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:22 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2, 0x8) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f00000003c0)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000300)="72616d6673002d2868c135431258dbec996f0ffaa4ae602ef0dc21fac36dbb31ca55634a0f5d81e33dbb2c6baf8f9adda202cef40184f38d47078caf664f2a402f172a379e9264f3aa676b72997a3eb6c7d461fd2d312c66c5d76ba703ab7aa03d8269d4776d32a2fd664c6fcf91807b3a3036ad343368bee78338a3d0763468dc18caaf4cd862c6b7cbc8f653b63f097e20a1c9978f7e6b4afef5a9b9245af1d045f8b4ed446f97bbec521d6180a57c88a61d43", 0x0, 0x0) iopl(0xffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x10000, 0x0) write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x113, 0x29, 0x1, {0xffff, [{{0x0, 0x4, 0x8}, 0x6, 0xb5cc, 0x7, './file1'}, {{0x20, 0x2, 0x7}, 0x0, 0x7, 0xb, './file0/bus'}, {{0x44, 0x4, 0x1}, 0x8, 0x9, 0xb, './file0/bus'}, {{0x21, 0x0, 0x8}, 0x1, 0xffffffffffffff95, 0x7, './file0'}, {{0x1, 0x1, 0x7}, 0xfffffffffffffff3, 0x5, 0x7, './file0'}, {{0x0, 0x4, 0x3}, 0x101, 0x3ff, 0x7, './file0'}, {{0xa1, 0x4, 0x6}, 0x1000, 0x4, 0xb, './file0/bus'}, {{0x28, 0x1, 0x8}, 0xff, 0x7, 0xb, './file0/bus'}]}}, 0x113) creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 05:29:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) [ 657.037718] audit: type=1804 audit(1543901362.535:355): pid=24138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/273/file0/bus" dev="ramfs" ino=90134 res=1 05:29:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:22 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:22 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x100000000000000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, 0x0) 05:29:22 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) [ 657.252855] audit: type=1804 audit(1543901362.745:356): pid=24164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/274/file0/bus" dev="ramfs" ino=90165 res=1 05:29:22 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 657.312602] audit: type=1804 audit(1543901362.775:357): pid=24166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/274/file0/bus" dev="ramfs" ino=90176 res=1 05:29:22 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x40000000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, 0x0) 05:29:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:22 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/bus\x00', 0x228000, 0x2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='fuse\x00', 0x1000, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x7f}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@audit='audit'}, {@obj_type={'obj_type', 0x3d, 'ramfs\x00'}}, {@euid_lt={'euid<', r4}}, {@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid', 0x3d, r5}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsdef={'smackfsdef', 0x3d, '(\'bdev}&\'%user'}}]}}) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 657.478015] audit: type=1804 audit(1543901362.975:358): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/275/file0/bus" dev="ramfs" ino=89401 res=1 05:29:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, 0x0) 05:29:23 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x1000000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) [ 657.527276] audit: type=1804 audit(1543901362.995:359): pid=24187 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/275/file0/bus" dev="ramfs" ino=89408 res=1 05:29:23 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x5, 0x9, 0x1, 0x1}) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 05:29:23 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:23 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:23 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:23 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) fstat(r0, &(0x7f00000000c0)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x0) 05:29:23 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe000000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 658.226287] FAULT_INJECTION: forcing a failure. [ 658.226287] name failslab, interval 1, probability 0, space 0, times 0 [ 658.237886] CPU: 1 PID: 24219 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #265 [ 658.245290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.254663] Call Trace: [ 658.257305] dump_stack+0x244/0x39d [ 658.261009] ? dump_stack_print_info.cold.1+0x20/0x20 [ 658.266236] ? debug_smp_processor_id+0x1c/0x20 [ 658.270945] ? perf_trace_lock+0x14d/0x7a0 05:29:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 658.275203] should_fail.cold.4+0xa/0x17 [ 658.279287] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 658.284408] ? perf_trace_lock+0x14d/0x7a0 [ 658.288673] ? _parse_integer+0x180/0x180 [ 658.292846] ? lock_is_held_type+0x210/0x210 [ 658.297306] ? find_held_lock+0x36/0x1c0 [ 658.301402] ? perf_trace_sched_process_exec+0x860/0x860 [ 658.306883] ? drm_unbind_agp+0x20/0x20 [ 658.310883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 658.316458] __should_failslab+0x124/0x180 [ 658.321207] should_failslab+0x9/0x14 05:29:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 658.325023] __kmalloc+0x2e0/0x760 [ 658.328571] ? find_held_lock+0x36/0x1c0 [ 658.332647] ? drm_ioctl+0x48d/0xb00 [ 658.336380] drm_ioctl+0x48d/0xb00 [ 658.339947] ? drm_mode_rmfb_ioctl+0x60/0x60 [ 658.344367] ? wait_for_completion+0x8a0/0x8a0 [ 658.348970] ? drm_ioctl_kernel+0x330/0x330 [ 658.353316] ? __fget_light+0x2e9/0x430 [ 658.358067] ? fget_raw+0x20/0x20 [ 658.361547] ? __sb_end_write+0xd9/0x110 [ 658.365627] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 658.371209] ? fput+0x130/0x1a0 [ 658.374510] ? do_fast_syscall_32+0x150/0xfb2 [ 658.379021] drm_compat_ioctl+0x249/0x320 [ 658.383199] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 658.388416] ? compat_drm_setunique+0x10/0x10 [ 658.392920] __ia32_compat_sys_ioctl+0x20e/0x630 [ 658.397883] do_fast_syscall_32+0x34d/0xfb2 [ 658.402222] ? do_int80_syscall_32+0x890/0x890 [ 658.406817] ? entry_SYSENTER_compat+0x68/0x7f [ 658.411397] ? trace_hardirqs_off_caller+0xbb/0x310 [ 658.416448] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 658.421291] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:29:23 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = geteuid() r2 = getgid() lstat(&(0x7f0000000100)='./file0/bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x400, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}], [{@appraise_type='appraise_type=imasig'}, {@euid_lt={'euid<', r3}}, {@smackfsroot={'smackfsroot', 0x3d, "8647504c"}}]}}) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 658.426146] ? trace_hardirqs_on_caller+0x310/0x310 [ 658.431179] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 658.436208] ? prepare_exit_to_usermode+0x291/0x3b0 [ 658.441253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 658.446113] entry_SYSENTER_compat+0x70/0x7f [ 658.450562] RIP: 0023:0xf7f12a29 [ 658.453948] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 05:29:24 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) [ 658.472884] RSP: 002b:00000000f5f0e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 658.480603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000ffffffad [ 658.487889] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 658.495165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 658.502443] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 658.509722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:29:24 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:24 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:24 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x3f00, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) [ 658.600515] audit: type=1804 audit(1543901364.095:360): pid=24243 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/278/file0/bus" dev="ramfs" ino=89507 res=1 [ 658.667488] audit: type=1804 audit(1543901364.135:361): pid=24244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/278/file0/bus" dev="ramfs" ino=89513 res=1 05:29:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4}}, 0x30) 05:29:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) 05:29:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:24 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xadc5, 0x80000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'syzkaller1\x00', 0x1}, 0x18) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffc0189436, &(0x7f0000000140)) 05:29:25 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffc020660b, &(0x7f0000000140)) 05:29:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x229) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='ramfs\x00', 0x6, 0x3) 05:29:25 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0xa40) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x9}, 0xb) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff402c5828, &(0x7f0000000140)) 05:29:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:25 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0xe00000000000000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:25 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc9, &(0x7f0000000140)) 05:29:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 05:29:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:25 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x3f00000000000000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff402c582a, &(0x7f0000000140)) 05:29:26 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000380)) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000200)={'\x00', 0x9f}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000000c0)={0x5, 0x7, 0x4}) r2 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0xfffffffffffffffc, 0x2) syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0xdf, 0x111402) execve(&(0x7f00000001c0)='./file0/bus\x00', &(0x7f00000002c0)=[&(0x7f0000000240)='!\x00', &(0x7f0000000280)='/dev/autofs\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='\x00']) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000480)=[{0x1, 0x6, 0x5, 0x0, @time={0x77359400}, {0x800, 0x200}, {0x3b2, 0x6}, @addr={0x7fff, 0x401}}, {0x7, 0x7fffffff, 0x6, 0x4, @time, {0x9, 0x7f}, {0x1, 0x8}, @queue={0x3f, {0x20, 0x3}}}, {0x3, 0x9, 0x7fff, 0x4, @tick=0xffff, {0x8, 0x20}, {0x0, 0x73a8}, @quote={{0x7, 0x8}, 0x47f, &(0x7f00000003c0)={0x7, 0x7, 0x4, 0x7f, @time={0x77359400}, {0xac3, 0x81}, {0xb1f0, 0x1}, @control={0x3, 0xffffffffffffff59, 0x1}}}}, {0x1, 0x2, 0x4, 0x80000001, @tick=0xff, {0x20000000000000, 0x80000000}, {0xb4e3, 0x2}, @note={0x8, 0x9, 0x5, 0x8, 0x3}}, {0x6, 0x100000001, 0x101, 0x9, @time={r3, r4+30000000}, {0xa7, 0x6}, {0x7b61, 0x1}, @result={0x7f, 0x8}}, {0x9, 0x3, 0x3, 0x5, @time={0x77359400}, {0x5, 0x8}, {0x0, 0x401}, @note={0xea2, 0x8, 0x1, 0x1ff, 0x8}}, {0x75, 0x7, 0x10000, 0x3ff, @time={r5, r6+10000000}, {0x7, 0x4}, {0x3ff, 0x9}, @raw8={"d1126472e0fbd6f5b0d2f204"}}, {0x3, 0xfffffffffffffe01, 0x7, 0x5, @time={0x77359400}, {0x8, 0x9}, {0x4, 0x2}, @connect={{0x1, 0x3}, {0x7, 0xd6}}}], 0xe0) 05:29:26 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x4000000000000000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00005452, &(0x7f0000000140)) 05:29:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:26 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:26 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:26 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x3f000000, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(0x0, 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00005421, &(0x7f0000000140)) 05:29:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864c9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(0x0, 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 661.399147] kauditd_printk_skb: 10 callbacks suppressed [ 661.399162] audit: type=1804 audit(1543901366.895:372): pid=24376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/285/file0/bus" dev="ramfs" ino=89795 res=1 05:29:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x0) 05:29:27 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x4000, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 661.553151] audit: type=1804 audit(1543901367.045:373): pid=24389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/286/file0/bus" dev="ramfs" ino=90782 res=1 05:29:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb8, &(0x7f0000000140)) 05:29:27 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(0x0, 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 661.601409] audit: type=1804 audit(1543901367.045:374): pid=24394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/286/file0/bus" dev="ramfs" ino=90785 res=1 05:29:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)="f4c8b2c1d9e3c319b3586931ee178c47c8d52d64ea2ac16d1ce9da196cb7f09188552cc2b4792ad540523b8cb7d4c6749476fce2156bb629960646421d95380743387c636d6426d4a51946dd15d8e84b2a292477b61aa0a95d9795669331838e51acc5dc7f1315544de9b75e575a111907c040c9211e5bce47", 0x79}, {&(0x7f0000000240)="9eb9c679ab4d830fd2333afb50aa4092610fbf3d8c53d8691037c275a55a3082b74cbf6d0e87a1475979a92070b588bb93307ae0f255de7620bbf83c1a11b68fd5e144d194c675a49c5e6dd2774262bacdb0deb64690d55618f9760ecd527e69f9001ff86c8b6e596ddec3574b2e5a999351a109706ad48145f43e75b9c1", 0x7e}, {&(0x7f00000002c0)="3d344a8fb801d19615fc6926dfe554367ce4e98727f554da4382dbd3030b842da4238f4b22bdac42a0e7c6e5630fd8cd0ee1882a9cb6cffa02eeaf247279e8ab59f49e7786714de8f3e6d665422ae700eb460d9f4994491a362d0f9963e33105fd67dedf9d3e8e37b78738c34e710f7f4c5643bbfd310a4cb85be9ba61a61dd177207cd4c8f659a4186a3cc03cedccd1d3bef49ddb144847863d847fe65b55aaa22d90710f329546da810b6025edbca60565612c68abd5186cdd1b016c8c7e6b66227fec65fbb97b82928b6ce4a22665", 0xd0}, {&(0x7f00000003c0)="744dd47220557eef1eb5584341c180180803b778ce19b7ad8fa2aee267d9ec823737cfa807d4aabbdbe1fbab0b6771ad332d6454fd7fdd01003f5bc718a8019e58b96072e21dc562312a2b9feb06b8fc2c4cfaa1a80c98a5a1259ed9b94d65e70b1d15530175ae4e6099e1f6df302f71119740159bb405af1ed119ac4a3a5f90dfd4548f888fd0c0b3d0674250e2643bd5510b6e2cdd4fe1670294d14891442fb30d0129b9f824a4229d68dec76fdede99e7c0e583778d9b3bf6ed5ef298ecb5f3d1aa0bc45a420142067f0a620adb022d193f", 0xd3}, {&(0x7f00000004c0)="5ae39dc6c3702e92ed57ba9587e9b0e783dea2f58b80ee2994b60ef2442be82ec12a05b9cae4d97d7f29402d2e1cd8d750daa7506340df2b67f221f75ca7a65a50cf995f48ba5200ff0c6ce16dc8b0918e5c08c025652e2746fa09d97e2921b0f41b71649c8edb8648640311a4", 0x6d}, {&(0x7f0000000540)="bbf712b6cf30a95d799664ce5efdd14ff03ca594e5f94fcabdfe8c02a2139b1f1a66f81f8e98dad845d1737a778332c4ccfa7cbb33754881399fdce618850ada29bf71982feaea7e85ee49e0a6eaa584f9f6a099249dbf35cceb62cba6e5b2afb823e47387c1756b21905171ba44c9a0bf0a07317635eca9f8087a4fb7bbe87126b20eb5de99b8e637643c651f93ffaa31a7436cee80f5a9177a4bc16259b9db7df44680f7c96e9570cdf5f924bea0371f472c14050bcd446d4fb43ffc90e344187c8cabd69c5bf9fa54f23686d23542131116941d34149d1f04cd3640a32de3dfd0b5f4b5f25d8091701c9e77b4a2319cef81f57dcb", 0xf6}], 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="04010000140100000100000087fee208f5fe0535c9fecb2007a28227dcb5dd341eef30eee339417e52503e0ff2fed726d6d0e3c502447a712c52ccaa08a602f671c75a7c0842237e57dc80a8dc77663eddba2f6dcd1cdda8a95388076ae72a20cb3910a37732f9375d6c4ff14a555a48834d400fdb532dad67c5bbba78ee1fe4e92856661b1b0aa0bb65526fed214584276128d31777163990f4a723cf9599a26dae3f625ae4eccc56308f3708bce4f6da52405bb2c524dbf723ddb7c5db42e494f2cd7bab23063775257f0871e054727a0ac93448afed259c424a2d77435617969f7f3ff09f4c1e0db9ee1188c67c967965e4844b00001c00000085ed3db580c81a1301000001ffffff766bf5004a9765a7e097c6572a000000640000001f010000010400007d29783ff6bc5f86e152e640e0e7f9a220d86e3ab92a26b9dd4fa7700d2b02bbaed56b2d0c301db8c26455876b452e4cf8f10c790642c5251e327f71c54a0cc1dfeee0cefd09a50c8181ac07a624d8f8a78dbf05c489db60880000000401000002000000d71b271855adc6a724ebf77f86736bdad75f71d79fbbf7f0b9416f2d99ac93ddb3114ba75806c0f6df7b9a2b1cc50b7e9d486d752f4646b8723ce23eef2ba1587e9cc8ac7c421795953bed7e77cfe3735bcadf7774b49e55ee300df12e24ee095113c2b06baceb53453041f55e1f87c206169528566beb0e8000000000000000000000000000000000"], 0x20c, 0x4}, 0x40001) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) open_by_handle_at(r1, &(0x7f0000000680)={0xf7, 0x1b, "82fb40ca5be8304a92cded8fe9bca3be021cf8d6fa65baed86f87517079a8b972b7f59be267803764c9c5a3ab7baf47bcd8cee73d1b608caa342d4ff2f4fe340163c2b060d88382bcf475709c3ab603dfba337c436ae694a6882041347e6d7b7adebe5a7287ea324c12d2d94497424a5beaca3ffa9f07e5b50f6656c9674cd9bb131fa927f545abb41a0fb1374a8156b79e7da2781e57b48ec531161439731714579ef0c4337423e109d7b877273e750ce9d863f19f4c469081aed3afd51d147b894efd4688775fde24036bb334631874f2285646eeeb6be33f7c72962812a5d15b3fbf9caa8bc4216f4969135094f"}, 0x420800) r2 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000900)={0xff00000, 0x4}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x18) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:27 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xe, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) [ 661.743611] audit: type=1804 audit(1543901367.235:375): pid=24408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/287/file0/bus" dev="ramfs" ino=89858 res=1 [ 661.825044] audit: type=1804 audit(1543901367.265:376): pid=24410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/287/file0/bus" dev="ramfs" ino=89864 res=1 05:29:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00005450, &(0x7f0000000140)) 05:29:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:27 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:27 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff00000000, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff4020940d, &(0x7f0000000140)) 05:29:27 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x5460, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0xffffffffffffffff) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x20, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'teql0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@local, 0x3f, r1}) 05:29:27 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xe00000000000000, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0/bus\x00', 0xfffffffffffffffd) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 662.466988] audit: type=1804 audit(1543901367.955:377): pid=24441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/289/file0/bus" dev="ramfs" ino=89952 res=1 05:29:28 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00000002, &(0x7f0000000140)) 05:29:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000100)=""/57, &(0x7f00000000c0)=0x39) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) [ 662.562414] audit: type=1804 audit(1543901367.955:378): pid=24441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/289/file0/bus" dev="ramfs" ino=89959 res=1 [ 662.652607] audit: type=1804 audit(1543901368.145:379): pid=24459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/291/file0/bus" dev="ramfs" ino=90930 res=1 [ 662.680002] audit: type=1804 audit(1543901368.155:380): pid=24462 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/291/file0/bus" dev="ramfs" ino=90936 res=1 05:29:28 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x4000000000000000, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:28 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="6e667303", 0x0, &(0x7f000000a000)) 05:29:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff0000541b, &(0x7f0000000140)) 05:29:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101800, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) 05:29:28 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff40049409, &(0x7f0000000140)) [ 663.244408] audit: type=1804 audit(1543901368.735:381): pid=24474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/292/file0/bus" dev="ramfs" ino=90979 res=1 05:29:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x14100, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f00000000c0)={r1, 0x9}) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:28 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xe000000, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x402c582a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffff00005460, &(0x7f0000000140)) 05:29:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2000) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x2) fanotify_mark(r0, 0x0, 0x2, r1, &(0x7f00000000c0)='./file0/bus\x00') creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) 05:29:29 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x102) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x800, 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') 05:29:29 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x40000000, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 05:29:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:29 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000480)=""/4096, 0x1000) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000380)) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@nfc, 0xffffffffffffffe9, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/88, 0x36}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f00000014c0)=""/115, 0x73}], 0x4, &(0x7f0000000300), 0x0, 0x3c9}, 0x2002) r3 = open$dir(&(0x7f0000000240)='./file0/bus\x00', 0x410240, 0x22) sched_getaffinity(r2, 0x300, &(0x7f0000001480)) fcntl$setlease(r3, 0x400, 0x1) mount(&(0x7f00000003c0)=@sr0='/dev/sr0\x00', &(0x7f0000000400)='./file0/bus\x00', &(0x7f0000000440)='aufs\x00', 0x4000, 0x0) 05:29:29 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x4e20, 0x0, 0x4e23, 0x10001, 0xa, 0x80, 0x20, 0x73, 0x0, r2}, {0x6, 0x8, 0x2, 0x0, 0x9997, 0x2, 0x0, 0xfffffffffffffffb}, {0x100000000, 0x200, 0xffffffffffffc90e, 0x797}, 0x3, 0x6e6bb1, 0x2, 0x1, 0x3, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x1a}, 0x4d4, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x2, 0x1, 0x3f, 0xfffffffffffffff8, 0x3f, 0x8001}}, 0xe8) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000140)) [ 663.917024] ================================================================== [ 663.924462] BUG: KASAN: use-after-free in __lock_acquire+0x36d9/0x4c20 [ 663.931139] Read of size 8 at addr ffff8881c16ce090 by task syz-executor4/24527 [ 663.938580] [ 663.940225] CPU: 1 PID: 24527 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #265 [ 663.947590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.956940] Call Trace: [ 663.959586] dump_stack+0x244/0x39d [ 663.963253] ? dump_stack_print_info.cold.1+0x20/0x20 [ 663.968448] ? printk+0xa7/0xcf [ 663.971764] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 663.976530] print_address_description.cold.7+0x9/0x1ff [ 663.981906] kasan_report.cold.8+0x242/0x309 [ 663.986332] ? __lock_acquire+0x36d9/0x4c20 [ 663.986350] __asan_report_load8_noabort+0x14/0x20 [ 663.995588] __lock_acquire+0x36d9/0x4c20 [ 663.995605] ? __free_pages+0x149/0x190 [ 663.995619] ? free_unref_page+0x960/0x960 [ 663.995638] ? mark_held_locks+0x130/0x130 [ 663.995654] ? kasan_check_write+0x14/0x20 [ 663.995686] ? finish_task_switch+0x615/0x910 [ 663.995704] ? __switch_to_asm+0x40/0x70 [ 664.025115] ? preempt_notifier_register+0x200/0x200 [ 664.030239] ? __switch_to_asm+0x34/0x70 [ 664.034331] ? __switch_to_asm+0x34/0x70 [ 664.038401] ? __switch_to_asm+0x40/0x70 [ 664.042476] ? __switch_to_asm+0x34/0x70 [ 664.046553] ? __switch_to_asm+0x40/0x70 [ 664.050616] ? __switch_to_asm+0x34/0x70 [ 664.054680] ? __switch_to_asm+0x40/0x70 [ 664.058747] ? __switch_to_asm+0x34/0x70 [ 664.062812] ? __switch_to_asm+0x34/0x70 [ 664.066876] ? __switch_to_asm+0x40/0x70 [ 664.071143] ? __switch_to_asm+0x34/0x70 [ 664.075222] ? __switch_to_asm+0x40/0x70 [ 664.075234] ? __switch_to_asm+0x34/0x70 [ 664.075245] ? __switch_to_asm+0x40/0x70 [ 664.075277] ? __schedule+0x8d7/0x21d0 [ 664.075294] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 664.075314] ? __sched_text_start+0x8/0x8 [ 664.083437] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 664.083458] ? find_held_lock+0x36/0x1c0 [ 664.083474] ? mark_held_locks+0xc7/0x130 [ 664.083491] lock_acquire+0x1ed/0x520 [ 664.083584] ? vhost_transport_send_pkt+0x12e/0x380 [ 664.122765] ? lock_release+0xa00/0xa00 [ 664.126762] ? preempt_schedule+0x4d/0x60 [ 664.130923] ? ___preempt_schedule+0x16/0x18 [ 664.135354] ? __local_bh_enable_ip+0x1a3/0x260 [ 664.140067] _raw_spin_lock_bh+0x31/0x40 [ 664.144137] ? vhost_transport_send_pkt+0x12e/0x380 [ 664.149151] vhost_transport_send_pkt+0x12e/0x380 [ 664.153981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.159521] ? vhost_vsock_dev_open+0x5a0/0x5a0 [ 664.164179] ? virtio_transport_send_pkt_info+0x2e7/0x460 [ 664.169701] ? __local_bh_enable_ip+0x160/0x260 [ 664.174357] virtio_transport_send_pkt_info+0x31d/0x460 [ 664.179709] virtio_transport_connect+0x17c/0x220 [ 664.184539] ? virtio_transport_send_pkt_info+0x460/0x460 [ 664.190242] ? vsock_auto_bind+0xa9/0xe0 [ 664.194288] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 664.199924] vsock_stream_connect+0x4ed/0xe40 [ 664.204419] ? vsock_dgram_connect+0x500/0x500 [ 664.208992] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 664.214697] ? aa_label_sk_perm+0x91/0x100 [ 664.218933] ? finish_wait+0x430/0x430 [ 664.222804] ? aa_af_perm+0x5a0/0x5a0 [ 664.226608] ? apparmor_socket_connect+0xb6/0x160 [ 664.231434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.236958] ? security_socket_connect+0x94/0xc0 [ 664.241792] __sys_connect+0x37d/0x4c0 [ 664.245679] ? __ia32_sys_accept+0xb0/0xb0 [ 664.249928] ? kasan_check_read+0x11/0x20 [ 664.254061] ? _copy_to_user+0xc8/0x110 [ 664.258045] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 664.263708] ? put_old_timespec32+0x110/0x280 [ 664.268215] ? do_fast_syscall_32+0x150/0xfb2 [ 664.272699] ? do_fast_syscall_32+0x150/0xfb2 [ 664.277194] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 664.281789] ? trace_hardirqs_on+0xbd/0x310 [ 664.286100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.291626] ? entry_SYSENTER_compat+0x70/0x7f [ 664.296192] ? trace_hardirqs_off_caller+0x310/0x310 [ 664.301291] __ia32_sys_connect+0x72/0xb0 [ 664.305430] do_fast_syscall_32+0x34d/0xfb2 [ 664.309734] ? do_int80_syscall_32+0x890/0x890 [ 664.314299] ? entry_SYSENTER_compat+0x68/0x7f [ 664.318890] ? trace_hardirqs_off_caller+0xbb/0x310 [ 664.323890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 664.328712] ? trace_hardirqs_on_caller+0x310/0x310 [ 664.333732] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 664.338737] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 664.345557] ? __switch_to_asm+0x40/0x70 [ 664.349597] ? __switch_to_asm+0x34/0x70 [ 664.353677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 664.358519] entry_SYSENTER_compat+0x70/0x7f [ 664.362959] RIP: 0023:0xf7fcaa29 05:29:29 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) 05:29:29 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) 05:29:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "315639c01dfadfdf98acafb9baf56e0b2ee5fbf4972d52a24b412a9274d2996c"}}) 05:29:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) bind(r1, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80) 05:29:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfff, &(0x7f0000000140)) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000280)) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x76f5bb7fc602926a, @bt={0x8, 0x9, 0x1, 0x3, 0xc00000000, 0x4, 0x0, 0xfffffffffffffc00, 0x5, 0x1, 0x0, 0x4, 0x3, 0x0, 0xb, 0x8}}) [ 664.366323] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 664.385222] RSP: 002b:00000000f5fc60cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 664.392927] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000200 [ 664.400196] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.407466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 05:29:29 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 664.414746] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 664.422023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.429296] [ 664.430952] Allocated by task 24527: [ 664.434706] save_stack+0x43/0xd0 [ 664.438165] kasan_kmalloc+0xc7/0xe0 [ 664.441937] __kmalloc_node+0x50/0x70 [ 664.445745] kvmalloc_node+0xb9/0xf0 [ 664.449459] vhost_vsock_dev_open+0xa2/0x5a0 [ 664.453944] misc_open+0x3ca/0x560 [ 664.457496] chrdev_open+0x25a/0x710 [ 664.461212] do_dentry_open+0x499/0x1250 [ 664.465275] vfs_open+0xa0/0xd0 05:29:30 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000012, &(0x7f0000000000)=0x40000007f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00@\x00', 0x10) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000400)='y\x00', 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r2, r3, &(0x7f0000000540), 0x8000fffffffe) [ 664.468559] path_openat+0x12bc/0x5150 [ 664.472466] do_filp_open+0x255/0x380 [ 664.476272] do_sys_open+0x568/0x700 [ 664.479988] __ia32_compat_sys_openat+0x98/0xf0 [ 664.484750] do_fast_syscall_32+0x34d/0xfb2 [ 664.489076] entry_SYSENTER_compat+0x70/0x7f [ 664.493485] [ 664.495113] Freed by task 24526: [ 664.498483] save_stack+0x43/0xd0 [ 664.501981] __kasan_slab_free+0x102/0x150 [ 664.506218] kasan_slab_free+0xe/0x10 [ 664.510032] kfree+0xcf/0x230 [ 664.513143] kvfree+0x61/0x70 [ 664.516270] vhost_vsock_dev_release+0x4f4/0x720 [ 664.521033] __fput+0x385/0xa30 [ 664.524317] ____fput+0x15/0x20 [ 664.527608] task_work_run+0x1e8/0x2a0 [ 664.531508] exit_to_usermode_loop+0x318/0x380 [ 664.536109] do_fast_syscall_32+0xcd5/0xfb2 [ 664.540443] entry_SYSENTER_compat+0x70/0x7f [ 664.544856] [ 664.546507] The buggy address belongs to the object at ffff8881c16c5380 [ 664.546507] which belongs to the cache kmalloc-64k of size 65536 [ 664.559383] The buggy address is located 36112 bytes inside of [ 664.559383] 65536-byte region [ffff8881c16c5380, ffff8881c16d5380) [ 664.571609] The buggy address belongs to the page: [ 664.576542] page:ffffea000705b000 count:1 mapcount:0 mapping:ffff8881da802500 index:0x0 compound_mapcount: 0 [ 664.586528] flags: 0x2fffc0000010200(slab|head) [ 664.591201] raw: 02fffc0000010200 ffffea0006e36008 ffffea0006e2e008 ffff8881da802500 [ 664.599067] raw: 0000000000000000 ffff8881c16c5380 0000000100000001 0000000000000000 [ 664.606969] page dumped because: kasan: bad access detected [ 664.612676] [ 664.614297] Memory state around the buggy address: [ 664.619226] ffff8881c16cdf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.626585] ffff8881c16ce000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.626612] kobject: 'loop3' (00000000f9290edd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 664.633945] >ffff8881c16ce080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.633951] ^ [ 664.633961] ffff8881c16ce100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.633971] ffff8881c16ce180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.633976] ================================================================== [ 664.633980] Disabling lock debugging due to kernel taint [ 664.633987] Kernel panic - not syncing: panic_on_warn set ... [ 664.634003] CPU: 1 PID: 24527 Comm: syz-executor4 Tainted: G B 4.20.0-rc5+ #265 [ 664.634010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.634014] Call Trace: [ 664.634036] dump_stack+0x244/0x39d [ 664.634057] ? dump_stack_print_info.cold.1+0x20/0x20 [ 664.690076] kobject: 'loop5' (000000002e4ededa): kobject_uevent_env [ 664.696839] panic+0x2ad/0x55c [ 664.696855] ? add_taint.cold.5+0x16/0x16 [ 664.696877] ? add_taint.cold.5+0x5/0x16 [ 664.713059] kobject: 'loop5' (000000002e4ededa): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 664.717677] ? trace_hardirqs_off+0xaf/0x310 [ 664.717695] kasan_end_report+0x47/0x4f [ 664.717708] kasan_report.cold.8+0x76/0x309 [ 664.717723] ? __lock_acquire+0x36d9/0x4c20 [ 664.717738] __asan_report_load8_noabort+0x14/0x20 [ 664.717757] __lock_acquire+0x36d9/0x4c20 [ 664.770941] ? __free_pages+0x149/0x190 [ 664.774902] ? free_unref_page+0x960/0x960 [ 664.779135] ? mark_held_locks+0x130/0x130 [ 664.783383] ? kasan_check_write+0x14/0x20 [ 664.787617] ? finish_task_switch+0x615/0x910 [ 664.792106] ? __switch_to_asm+0x40/0x70 [ 664.796155] ? preempt_notifier_register+0x200/0x200 [ 664.801242] ? __switch_to_asm+0x34/0x70 [ 664.805288] ? __switch_to_asm+0x34/0x70 [ 664.809347] ? __switch_to_asm+0x40/0x70 [ 664.813406] ? __switch_to_asm+0x34/0x70 [ 664.817463] ? __switch_to_asm+0x40/0x70 [ 664.821505] ? __switch_to_asm+0x34/0x70 [ 664.825547] ? __switch_to_asm+0x40/0x70 [ 664.829621] ? __switch_to_asm+0x34/0x70 [ 664.833713] ? __switch_to_asm+0x34/0x70 [ 664.837791] ? __switch_to_asm+0x40/0x70 [ 664.841836] ? __switch_to_asm+0x34/0x70 [ 664.845903] ? __switch_to_asm+0x40/0x70 [ 664.849970] ? __switch_to_asm+0x34/0x70 [ 664.854037] ? __switch_to_asm+0x40/0x70 [ 664.858128] ? __schedule+0x8d7/0x21d0 [ 664.862051] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 664.867490] ? __sched_text_start+0x8/0x8 [ 664.871631] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 664.876374] ? find_held_lock+0x36/0x1c0 [ 664.880426] ? mark_held_locks+0xc7/0x130 [ 664.884578] lock_acquire+0x1ed/0x520 [ 664.888365] ? vhost_transport_send_pkt+0x12e/0x380 [ 664.893374] ? lock_release+0xa00/0xa00 [ 664.897332] ? preempt_schedule+0x4d/0x60 [ 664.901475] ? ___preempt_schedule+0x16/0x18 [ 664.905889] ? __local_bh_enable_ip+0x1a3/0x260 [ 664.910546] _raw_spin_lock_bh+0x31/0x40 [ 664.914588] ? vhost_transport_send_pkt+0x12e/0x380 [ 664.919588] vhost_transport_send_pkt+0x12e/0x380 [ 664.924416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.929938] ? vhost_vsock_dev_open+0x5a0/0x5a0 [ 664.934608] ? virtio_transport_send_pkt_info+0x2e7/0x460 [ 664.940133] ? __local_bh_enable_ip+0x160/0x260 [ 664.944788] virtio_transport_send_pkt_info+0x31d/0x460 [ 664.950149] virtio_transport_connect+0x17c/0x220 [ 664.954992] ? virtio_transport_send_pkt_info+0x460/0x460 [ 664.960520] ? vsock_auto_bind+0xa9/0xe0 [ 664.964570] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 664.970145] vsock_stream_connect+0x4ed/0xe40 [ 664.974654] ? vsock_dgram_connect+0x500/0x500 [ 664.979235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 664.984773] ? aa_label_sk_perm+0x91/0x100 [ 664.989003] ? finish_wait+0x430/0x430 [ 664.992893] ? aa_af_perm+0x5a0/0x5a0 [ 664.996733] ? apparmor_socket_connect+0xb6/0x160 [ 665.001588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.007147] ? security_socket_connect+0x94/0xc0 [ 665.011911] __sys_connect+0x37d/0x4c0 [ 665.015784] ? __ia32_sys_accept+0xb0/0xb0 [ 665.020038] ? kasan_check_read+0x11/0x20 [ 665.024199] ? _copy_to_user+0xc8/0x110 [ 665.028163] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 665.033716] ? put_old_timespec32+0x110/0x280 [ 665.038197] ? do_fast_syscall_32+0x150/0xfb2 [ 665.042724] ? do_fast_syscall_32+0x150/0xfb2 [ 665.047203] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 665.051766] ? trace_hardirqs_on+0xbd/0x310 [ 665.056074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.061621] ? entry_SYSENTER_compat+0x70/0x7f [ 665.066227] ? trace_hardirqs_off_caller+0x310/0x310 [ 665.071312] __ia32_sys_connect+0x72/0xb0 [ 665.075451] do_fast_syscall_32+0x34d/0xfb2 [ 665.079771] ? do_int80_syscall_32+0x890/0x890 [ 665.084345] ? entry_SYSENTER_compat+0x68/0x7f [ 665.088921] ? trace_hardirqs_off_caller+0xbb/0x310 [ 665.093917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 665.098771] ? trace_hardirqs_on_caller+0x310/0x310 [ 665.103788] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 665.108816] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 665.115463] ? __switch_to_asm+0x40/0x70 [ 665.119503] ? __switch_to_asm+0x34/0x70 [ 665.123573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 665.128423] entry_SYSENTER_compat+0x70/0x7f [ 665.132812] RIP: 0023:0xf7fcaa29 [ 665.136174] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 665.155053] RSP: 002b:00000000f5fc60cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 665.162738] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000200 [ 665.169988] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.177238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.184492] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 665.191742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.200166] Kernel Offset: disabled [ 665.203786] Rebooting in 86400 seconds..