fffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f0000000400)=ANY=[]}, 0x78) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00', 0x4}, 0x18) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/57) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) [ 268.352069] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 268.385479] IPVS: ftp: loaded support on port[0] = 21 [ 268.437109] overlayfs: failed to resolve './file0': -2 06:40:54 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xff}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0xfffffffffffffffe, 0xe, 0x1f}) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, 0x0}, 0x8804) pipe(0x0) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f0000000400)=ANY=[]}, 0x78) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00', 0x4}, 0x18) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/57) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) 06:40:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:40:54 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xff}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0xfffffffffffffffe, 0xe, 0x1f}) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, 0x0}, 0x8804) pipe(0x0) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f0000000400)=ANY=[]}, 0x78) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00', 0x4}, 0x18) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/57) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) 06:40:54 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xff}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0xfffffffffffffffe, 0xe, 0x1f}) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, 0x0}, 0x8804) pipe(0x0) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f0000000400)=ANY=[]}, 0x78) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00', 0x4}, 0x18) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/57) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) 06:40:54 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xff}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0xfffffffffffffffe, 0xe, 0x1f}) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, 0x0}, 0x8804) pipe(0x0) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f0000000400)=ANY=[]}, 0x78) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00', 0x4}, 0x18) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/57) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) [ 269.244637] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 269.328774] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 06:40:55 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0xc0045405, 0x4000000000790000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002540)='/dev/vcs\x00', 0x303002, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000025c0)={0x1, &(0x7f0000002580)=[{}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) 06:40:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:40:55 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xff}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0xfffffffffffffffe, 0xe, 0x1f}) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, 0x0}, 0x8804) pipe(0x0) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000100)) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/179) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f0000000400)=ANY=[]}, 0x78) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'bond0\x00', 0x4}, 0x18) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/57) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) 06:40:55 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x100, @empty, 0x4}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x40) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x38) 06:40:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe803900080008000a000f0000002d0000009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d242132e2ae", 0x55}], 0x48}, 0x0) [ 269.793748] overlayfs: failed to resolve './file0': -2 06:40:55 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900940002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100003b02000000f7338c40", 0x70, 0x7ff}, {&(0x7f0000010100)}, {&(0x7f0000010400)}, {&(0x7f0000000580)="00000000780100"/22, 0x16, 0xc80}, {0x0}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000030000000100000002000000000000", 0x6c, 0x1400}, {0x0}, {&(0x7f0000010b00)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debi', 0x84, 0x1b80}, {&(0x7f0000010c00), 0x0, 0x18a8fc6b}, {&(0x7f0000000540)="00000000000100000000000000001b9b0000000000000000733f271532da2b01433b3798143ce01c02b6573b4c92479b2d74b045be894398c67fbdee23f29c76", 0x40, 0x7}, {0x0}, {&(0x7f0000011000)}, {&(0x7f0000011200)}, {&(0x7f0000000540)}, {&(0x7f0000011500)}, {&(0x7f0000011600), 0x0, 0x4013e0}, {&(0x7f0000011700)}, {0x0}, {0x0}, {&(0x7f0000011d00)="73f4ab0c", 0x4, 0x5ff000}, {0x0, 0xfe7c}, {0x0}, {&(0x7f0000012600)}, {&(0x7f0000012800)}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000013a00), 0x0, 0x2400000}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="3b1a98ca3e115e7e0220f04250226e04b0564c4dcf633289e010522d6b9d4eaf09fb2afc87ed412cadf8f8b6c88db67f487b959e16ae15459adbaaa0e6b56ae39f2f43676b", @ANYRESHEX]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000005c0), &(0x7f0000000680)=0xe) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840)='devlink\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, @in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x6c, &(0x7f0000000280)={r5}, &(0x7f00000002c0)=0x20000288) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x101}, 0x8) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x104400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x180, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8011}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000a80)={@fixed={[], 0x11}, 0xffffffff}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x4040804) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0x92) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x8000, 0xff, 0x8, 0x8, 0x80000000, 0x7, 0x8, 0x3ff, r7}, &(0x7f0000000500)=0x20) 06:40:55 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0x32600) write$cgroup_subtree(r2, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000013fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000013ec0)=""/246, 0xf6}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000410aa3dbfdcadfdef83ed5d22796fce2e59f03e6b2c8483367845a7fd21697ebcd43160ecf29de2fc5c15237c179d934630f9d0849144f70f903c5cdfacbd843f60a9bd76e8b6928aaace5d391fcc7078c2470538c401d665c76ded80064ff8d692fcd58bf3ae22615b40c63d45e9297b9e01e8c9e659fb07418d366ac6125102077603a2bfcfa837763b3607aabd4ca7818a7841a4e03c3e27bbf1c219718412accabde70953128d57dd3158523566253cd2272be70ce2caa3431d8b073a9c1d64eb4082f18ddd480764249c569547cab2aaef747859f1b3fe169277fa086b1b448f123d5f8b92b503bbf6b099875879e91661b9f4542cf55637b2f7dda3e892a7886607faf4d1afd74c879d3ce004bd2d97f8ffeb85ee0a9c4"], 0x0, 0x26}, 0x20) syz_mount_image$hfs(&(0x7f0000000480)='hfs\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x2, &(0x7f00000008c0)=[{&(0x7f0000000800)="7504a12d5033df0dc1f43475fe91a06850f21716bfe4ae064311bc8de7bbaabed8d9e86f9066df22d8594094ee2d2745f4dc7a27f30432c93a090be135adff7311b20c33d6d068541c51ca6c8393d68aa164bbdbefcf4164f0e8ae5b64ba561866f3bad1f2ce9ccafc2c2a7c888dfc9aea9dab2af76c715491241196d477109550", 0x81, 0x9afa}, {&(0x7f0000000640)="87e6b8dd0b24deb1c70509c0881a063f7845b09884f3630319f3d165f0c1f8cf345a1b7c0d4d508cc5daf39f3a32ac006eb25fe7734e9fb9b7c03260c9b208233b32cd4cf12dc1a47ea8787364c35f5149ad2a64ee92fc7d1e108e85399a01fdebf1a8bf", 0x64, 0x72c8}], 0x90001, &(0x7f0000000900)={[{@dir_umask={'dir_umask', 0x3d, 0x8001}}, {@gid={'gid', 0x3d, 0xee01}}, {@file_umask={'file_umask', 0x3d, 0xffffffff}}], [{@dont_appraise='dont_appraise'}]}) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000009c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x6, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRESHEX=r2, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r3, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x9, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x59, &(0x7f0000000280)=""/89, 0x41100, 0x7, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000014000)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000014040)={0x4, 0x2, 0x1}, 0x10, r4, r2}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="b595e8ff10000000"], &(0x7f0000000180)='GPL\x00', 0x6f92ad17, 0x66, &(0x7f00000001c0)=""/102, 0x41000, 0x4, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x7, 0x7, 0x2}, 0x10, r4, r5}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) 06:40:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 270.025555] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 270.132390] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 270.195934] overlayfs: failed to resolve './file1': -2 [ 270.247019] F2FS-fs (loop0): Invalid Fs Meta Ino: node(512) meta(0) root(256) [ 270.387497] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 06:40:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 270.444510] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 270.530057] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 06:40:56 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x100, @empty, 0x4}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x40) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x38) [ 270.645670] F2FS-fs (loop0): Invalid Fs Meta Ino: node(512) meta(0) root(256) [ 270.715860] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 06:40:56 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x100, @empty, 0x4}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x40) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x38) 06:40:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 270.860392] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 270.908049] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 271.165788] overlayfs: failed to resolve './file1': -2 06:40:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:40:57 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x100, @empty, 0x4}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x40) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x38) 06:40:57 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f00000007c0)='0', 0x1) r1 = getpgrp(0x0) ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000000040)={&(0x7f0000000800)="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", 0x1000}) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) 06:40:57 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)=ANY=[@ANYBLOB='@']) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 06:40:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:40:57 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) dup3(r0, r1, 0x0) [ 271.978938] EXT4-fs (loop2): Unrecognized mount option "@" or missing value [ 272.084524] EXT4-fs (loop2): Unrecognized mount option "@" or missing value [ 272.192440] audit: type=1804 audit(1603176057.830:84): pid=12922 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/156/bus" dev="sda1" ino=16334 res=1 [ 272.317079] audit: type=1804 audit(1603176057.900:85): pid=12922 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/156/bus" dev="sda1" ino=16334 res=1 [ 272.488230] audit: type=1804 audit(1603176057.910:86): pid=12927 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/156/bus" dev="sda1" ino=16334 res=1 [ 272.541456] audit: type=1804 audit(1603176057.910:87): pid=12922 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/156/bus" dev="sda1" ino=16334 res=1 06:40:58 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x6, 0x0, &(0x7f0000000040)) 06:40:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:40:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x32}}, 0x4, 0x1, 0xff, 0x3, 0x2b82, 0x7f}, &(0x7f00000000c0)=0x20) syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffb, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="fea1ff7eec3360c97c925751d4f7e17d476d11f7", 0x14, 0x1}], 0x8040, &(0x7f0000000080)=ANY=[]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000300)={0x7, 0x7, 0x4, 0x2000, 0x3, {r2, r3/1000+10000}, {0x2, 0x2, 0x1, 0x40, 0x7f, 0x5, "b1b42bbb"}, 0x2, 0x2, @offset=0x68, 0xfffffffb, 0x0, r1}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x4, 0x6}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) syz_mount_image$tmpfs(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="811ed32a2cb04db1b4150ff5096ec56c17beab63825a35f1dbabd067cfe34d7730ebe9d603e1", 0x26, 0x868}], 0x4800, &(0x7f0000000480)={[{@huge_advise='huge=advise'}], [{@subj_type={'subj_type'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@uid_eq={'uid'}}, {@appraise='appraise'}]}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000140)={'team0\x00'}) 06:40:58 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) dup3(r0, r1, 0x0) 06:40:58 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000300)={@multicast1, @multicast1, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', r5, 0x4, 0x6, 0xfe, 0x7ff, 0x41, @private1={0xfc, 0x1, [], 0x1}, @remote, 0x40, 0x7, 0x2, 0x9}}) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00270d0000002b1ecd5d0000000000", @ANYRES32=r4, @ANYBLOB="00000000000000000e0000000c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec15, 0x0) 06:40:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000200)={0x0, 0x74}) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) dup3(r1, r1, 0x80000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x329) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) getrusage(0x0, &(0x7f0000000100)) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$set_timeout(0xf, r3, 0xbc) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000029000000430100"/24], 0x18}}], 0x1, 0x0) 06:40:58 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/hci\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') [ 273.003717] tmpfs: Bad mount option subj_type 06:40:58 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) dup3(r0, r1, 0x0) [ 273.028403] audit: type=1804 audit(1603176058.670:88): pid=12945 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/157/bus" dev="sda1" ino=16340 res=1 [ 273.032150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:40:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000c, 0x8, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff01", 0x403, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000011000)="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", 0x282, 0x1980}, {&(0x7f00000003c0)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[]) 06:40:58 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x286800, 0x0) [ 273.220893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:40:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:40:58 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) [ 273.272587] audit: type=1804 audit(1603176058.910:89): pid=12975 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/158/bus" dev="sda1" ino=16344 res=1 [ 273.367553] EXT4-fs (loop5): 1 orphan inode deleted [ 273.380059] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 06:40:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0xc040) 06:40:59 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) dup3(r0, r1, 0x0) 06:40:59 executing program 1: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x3, &(0x7f0000000280)=[{&(0x7f0000000bc0)="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", 0x1000, 0x100000001}, {&(0x7f00000000c0)="73a2f05809bcc9aade7b9fbc84f9ddbd4db9332926d24e335d38da", 0x1b, 0x8}, {&(0x7f0000000100)="4b7231679ab871642c4a86fdcf1418d9d6d6c1d155552a9c015228affa103786aaee6a98a185018d94f22719e994cff5bfecbff97a42", 0x36, 0x6}], 0x144820, &(0x7f0000000300)={[{@nodots='nodots'}, {@fat=@time_offset={'time_offset', 0x3d, 0x32b}}, {@fat=@dmask={'dmask'}}], [{@audit='audit'}, {@fowner_lt={'fowner<', 0xee01}}]}) 06:40:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000100), 0x4) 06:40:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:40:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c0000002200018a125ceda4bbeeb7917c"], 0x1c}}, 0x0) 06:40:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) [ 274.116117] audit: type=1804 audit(1603176059.750:90): pid=13017 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/159/bus" dev="sda1" ino=16346 res=1 06:40:59 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ebe000/0x1000)=nil) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'team0\x00'}) shmat(r0, &(0x7f0000001000/0x1000)=nil, 0x7000) 06:40:59 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:40:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) 06:40:59 executing program 5: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)={'security\x00'}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x58) 06:41:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000ee25d"], 0x1c}}, 0x0) 06:41:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) [ 274.467368] audit: type=1804 audit(1603176060.100:91): pid=13042 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/160/bus" dev="sda1" ino=16350 res=1 06:41:00 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ebe000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0xd000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) 06:41:00 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) 06:41:00 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:41:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000001380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000180)=0xfffffffffffffde1) 06:41:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) pipe(0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmmsg(r0, &(0x7f0000006340)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}], 0x1, 0x0) 06:41:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100), 0x4) 06:41:00 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000006dc0)='/proc/thread-self\x00', 0x40, 0x0) [ 274.814217] audit: type=1804 audit(1603176060.450:92): pid=13063 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/161/bus" dev="sda1" ino=15869 res=1 06:41:00 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:41:00 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self\x00', 0x450006, 0x0) 06:41:00 executing program 5: rt_sigaction(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) 06:41:00 executing program 4: getrlimit(0x0, &(0x7f0000000680)) [ 275.005534] audit: type=1804 audit(1603176060.640:93): pid=13080 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/162/bus" dev="sda1" ino=15834 res=1 06:41:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xfffffffffffffffb) 06:41:00 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) 06:41:00 executing program 2: r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000100)='numa_maps\x00') 06:41:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:01 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\r:q', 0x18, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast1]}]}}}}}, 0x0) 06:41:01 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/xfrm_stat\x00') 06:41:01 executing program 2: select(0xe, &(0x7f00000002c0), &(0x7f0000000300), 0x0, &(0x7f00000003c0)) 06:41:01 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) 06:41:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f00000000c0)) 06:41:01 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 06:41:01 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) 06:41:01 executing program 4: r0 = socket(0x2, 0x3, 0x50) connect$netlink(r0, &(0x7f0000000180), 0xc) 06:41:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980700009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000008800000000000002726f7365300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000030000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000fb000000000000ecff0008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000030000000700000000000000000000000000000048004354000001000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000040000000000000000000000000010000000000000000000000000000f1ffee0000e9ffffffffffffff0000000000000000000000000000000000000000000000000000002000000000000005000000000004000000000a0000000000000000000070009000000000000000000000000000000000000000010020004e4f545241434b0000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 06:41:01 executing program 1: rt_sigaction(0x13, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) 06:41:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @phonet, @can, @ipx={0x4, 0x0, 0x0, "446364e22a87"}}) [ 275.682015] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 06:41:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 06:41:01 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:41:01 executing program 4: socketpair(0x1, 0x0, 0x20000000, 0x0) 06:41:01 executing program 1: r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000140)='smaps\x00') 06:41:01 executing program 4: r0 = add_key$keyring(&(0x7f0000001180)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 06:41:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$netlink(r0, &(0x7f00000000c0), 0xc) 06:41:01 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:41:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000a0cff4)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) getsockopt$netlink(r1, 0x10e, 0x8000000009, &(0x7f0000000040)=""/5, &(0x7f0000000000)=0x5) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x479e613d}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) [ 276.202039] syz-executor.1: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 276.300282] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 276.328356] CPU: 1 PID: 13154 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 276.336281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.345680] Call Trace: [ 276.348384] dump_stack+0x22c/0x33e [ 276.352148] warn_alloc.cold+0x7b/0x18f [ 276.356264] ? zone_watermark_ok_safe+0x300/0x300 [ 276.361213] ? should_fail+0x142/0x7d8 [ 276.366167] ? ip_set_alloc+0x54/0x70 [ 276.370084] vzalloc+0x15c/0x1a0 [ 276.373466] ip_set_alloc+0x54/0x70 [ 276.377181] hash_mac_create+0x417/0x847 [ 276.381253] ? hash_mac4_add+0x1e60/0x1e60 [ 276.385492] ip_set_create+0x70e/0x1380 [ 276.389496] ? __find_set_type_get+0x450/0x450 [ 276.394178] ? lock_downgrade+0x750/0x750 [ 276.398425] ? __find_set_type_get+0x450/0x450 [ 276.403056] nfnetlink_rcv_msg+0xeff/0x1210 [ 276.407396] ? nfnetlink_net_init+0x170/0x170 [ 276.411977] ? avc_has_extended_perms+0x1020/0x1020 [ 276.416998] ? avc_has_extended_perms+0x1020/0x1020 [ 276.422041] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 276.426669] ? lock_downgrade+0x750/0x750 [ 276.430918] ? __local_bh_enable_ip+0x159/0x2a0 [ 276.435598] ? cred_has_capability+0x162/0x2e0 [ 276.440807] ? cred_has_capability+0x1d9/0x2e0 [ 276.446988] ? selinux_inode_copy_up+0x180/0x180 [ 276.452124] ? selinux_inode_copy_up+0x180/0x180 [ 276.456952] netlink_rcv_skb+0x160/0x440 [ 276.461024] ? nfnetlink_net_init+0x170/0x170 [ 276.465520] ? netlink_ack+0xae0/0xae0 [ 276.469421] ? ns_capable_common+0x117/0x140 [ 276.473839] nfnetlink_rcv+0x1b2/0x41b [ 276.477731] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 276.482504] netlink_unicast+0x4d5/0x690 [ 276.486575] ? netlink_sendskb+0x110/0x110 [ 276.490819] netlink_sendmsg+0x717/0xcc0 [ 276.495524] ? nlmsg_notify+0x1a0/0x1a0 [ 276.499572] ? __sock_recv_ts_and_drops+0x540/0x540 [ 276.504618] ? nlmsg_notify+0x1a0/0x1a0 [ 276.508642] sock_sendmsg+0xc7/0x130 [ 276.512366] ___sys_sendmsg+0x7bb/0x8f0 [ 276.516368] ? copy_msghdr_from_user+0x440/0x440 [ 276.521126] ? find_held_lock+0x2d/0x110 [ 276.525267] ? __fget+0x386/0x570 [ 276.528731] ? lock_downgrade+0x750/0x750 [ 276.532928] ? check_preemption_disabled+0x41/0x2b0 [ 276.537960] ? __fget+0x3ad/0x570 [ 276.541424] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 276.545676] ? lock_acquire+0x170/0x3f0 [ 276.549700] ? __might_fault+0xef/0x1d0 [ 276.553691] ? __fget_light+0x1d1/0x230 [ 276.557791] __x64_sys_sendmsg+0x132/0x220 [ 276.562032] ? __sys_sendmsg+0x1b0/0x1b0 [ 276.566189] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 276.571683] ? trace_hardirqs_off_caller+0x6e/0x210 [ 276.576753] ? do_syscall_64+0x21/0x670 [ 276.580834] do_syscall_64+0xf9/0x670 [ 276.584659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 276.589853] RIP: 0033:0x45de59 [ 276.593049] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 276.611957] RSP: 002b:00007fef3b916c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.619676] RAX: ffffffffffffffda RBX: 0000000000029b40 RCX: 000000000045de59 [ 276.626972] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 276.634271] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 276.641546] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 276.648818] R13: 00007ffcdebd7eaf R14: 00007fef3b9179c0 R15: 000000000118bf2c [ 277.212917] Mem-Info: [ 277.215387] active_anon:208267 inactive_anon:48593 isolated_anon:0 [ 277.215387] active_file:19196 inactive_file:29166 isolated_file:0 [ 277.215387] unevictable:10240 dirty:117 writeback:0 unstable:0 [ 277.215387] slab_reclaimable:18825 slab_unreclaimable:126026 [ 277.215387] mapped:61062 shmem:4318 pagetables:2059 bounce:0 [ 277.215387] free:1027733 free_pcp:650 free_cma:0 [ 277.273252] Node 0 active_anon:833068kB inactive_anon:194372kB active_file:76644kB inactive_file:116664kB unevictable:40960kB isolated(anon):0kB isolated(file):0kB mapped:244248kB dirty:468kB writeback:0kB shmem:17272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 921600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 277.323474] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 06:41:03 executing program 2: request_key(&(0x7f0000000100)='.request_key_auth\x00', 0x0, 0x0, 0x0) 06:41:03 executing program 5: request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0) 06:41:03 executing program 4: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) 06:41:03 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:41:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 277.367797] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.406975] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 277.432823] Node 0 DMA32 free:419172kB min:35784kB low:44728kB high:53672kB active_anon:830884kB inactive_anon:194372kB active_file:76644kB inactive_file:116664kB unevictable:40960kB writepending:468kB present:3129332kB managed:2567340kB mlocked:40960kB kernel_stack:9312kB pagetables:8384kB bounce:0kB free_pcp:2480kB local_pcp:1224kB free_cma:0kB 06:41:03 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000a0cff4)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) getsockopt$netlink(r2, 0x10e, 0x8000000009, &(0x7f0000000040)=""/5, &(0x7f0000000000)=0x5) 06:41:03 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = epoll_create(0xd3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0xd75690af93e0edad}) [ 277.523630] kauditd_printk_skb: 2 callbacks suppressed [ 277.523645] audit: type=1804 audit(1603176063.160:96): pid=13173 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/168/bus" dev="sda1" ino=16378 res=1 06:41:03 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:41:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x0, 0x148, 0x238, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1000}}, @common=@unspec=@mac={{0x30, 'mac\x00'}, {@remote}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_vlan\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'veth0_to_team\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) syz_emit_ethernet(0x4e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000086dd60"], 0x0) [ 277.651278] lowmem_reserve[]: 0 0 2 2 2 06:41:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) [ 277.691257] Node 0 Normal free:16kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.711501] x_tables: duplicate underflow at hook 2 [ 277.732178] x_tables: duplicate underflow at hook 2 06:41:03 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, r0/1000+10000}) [ 277.827074] audit: type=1804 audit(1603176063.460:97): pid=13193 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/169/bus" dev="sda1" ino=16383 res=1 [ 277.889169] lowmem_reserve[]: 0 0 0 0 0 [ 277.902391] Node 1 Normal free:3782348kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.960603] lowmem_reserve[]: 0 0 0 0 0 [ 277.968848] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 277.998578] Node 0 DMA32: 2731*4kB (UME) 1169*8kB (UME) 905*16kB (UME) 417*32kB (UME) 304*64kB (UME) 247*128kB (UME) 120*256kB (UME) 77*512kB (UM) 28*1024kB (UM) 10*2048kB (UM) 48*4096kB (UM) = 415076kB [ 278.037818] Node 0 Normal: 0*4kB 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 278.062815] Node 1 Normal: 73*4kB (UE) 367*8kB (UE) 271*16kB (UME) 68*32kB (U) 15*64kB (UME) 12*128kB (UME) 5*256kB (UM) 7*512kB (UME) 3*1024kB (UM) 1*2048kB (U) 918*4096kB (M) = 3782348kB [ 278.080438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.089924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.098923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.107875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.117678] 52268 total pagecache pages [ 278.122101] 0 pages in swap cache [ 278.125661] Swap cache stats: add 0, delete 0, find 0/0 [ 278.131543] Free swap = 0kB [ 278.134698] Total swap = 0kB [ 278.138130] 1965979 pages RAM [ 278.141758] 0 pages HighMem/MovableOnly [ 278.145888] 352020 pages reserved [ 278.149915] 0 pages cma reserved [ 278.153547] syz-executor.1: vmalloc: allocation failure: 17179869200 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 278.169697] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 278.174948] CPU: 1 PID: 13164 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 278.182813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.192187] Call Trace: [ 278.194772] dump_stack+0x22c/0x33e [ 278.198439] warn_alloc.cold+0x7b/0x18f [ 278.202441] ? zone_watermark_ok_safe+0x300/0x300 [ 278.207275] ? should_fail+0x142/0x7d8 [ 278.211188] ? ip_set_alloc+0x54/0x70 [ 278.214981] vzalloc+0x15c/0x1a0 [ 278.218346] ip_set_alloc+0x54/0x70 [ 278.221957] hash_mac_create+0x417/0x847 [ 278.226016] ? hash_mac4_add+0x1e60/0x1e60 [ 278.230245] ip_set_create+0x70e/0x1380 [ 278.234225] ? __find_set_type_get+0x450/0x450 [ 278.238909] ? __find_set_type_get+0x450/0x450 [ 278.243500] nfnetlink_rcv_msg+0xeff/0x1210 [ 278.247985] ? nfnetlink_net_init+0x170/0x170 [ 278.252471] ? avc_has_extended_perms+0x1020/0x1020 [ 278.257477] ? avc_has_extended_perms+0x1020/0x1020 [ 278.262482] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 278.266962] ? lock_downgrade+0x750/0x750 [ 278.271104] ? __local_bh_enable_ip+0x159/0x2a0 [ 278.275780] ? cred_has_capability+0x162/0x2e0 [ 278.280369] ? cred_has_capability+0x1d9/0x2e0 [ 278.284961] ? selinux_inode_copy_up+0x180/0x180 [ 278.289706] ? selinux_inode_copy_up+0x180/0x180 [ 278.294460] netlink_rcv_skb+0x160/0x440 [ 278.298516] ? nfnetlink_net_init+0x170/0x170 [ 278.303020] ? netlink_ack+0xae0/0xae0 [ 278.306916] ? ns_capable_common+0x117/0x140 [ 278.311315] nfnetlink_rcv+0x1b2/0x41b [ 278.315195] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 278.319974] netlink_unicast+0x4d5/0x690 [ 278.324030] ? netlink_sendskb+0x110/0x110 [ 278.328263] netlink_sendmsg+0x717/0xcc0 [ 278.332309] ? nlmsg_notify+0x1a0/0x1a0 [ 278.336262] ? __sock_recv_ts_and_drops+0x540/0x540 [ 278.341281] ? nlmsg_notify+0x1a0/0x1a0 [ 278.345259] sock_sendmsg+0xc7/0x130 [ 278.348969] ___sys_sendmsg+0x7bb/0x8f0 [ 278.352952] ? copy_msghdr_from_user+0x440/0x440 [ 278.357714] ? find_held_lock+0x2d/0x110 [ 278.361763] ? __fget+0x386/0x570 [ 278.365205] ? lock_downgrade+0x750/0x750 [ 278.369381] ? check_preemption_disabled+0x41/0x2b0 [ 278.374420] ? __fget+0x3ad/0x570 [ 278.377856] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 278.382072] ? lock_acquire+0x170/0x3f0 [ 278.386043] ? __might_fault+0xef/0x1d0 [ 278.390018] ? __fget_light+0x1d1/0x230 [ 278.394001] __x64_sys_sendmsg+0x132/0x220 [ 278.398219] ? __sys_sendmsg+0x1b0/0x1b0 [ 278.402282] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 278.407639] ? trace_hardirqs_off_caller+0x6e/0x210 [ 278.412649] ? do_syscall_64+0x21/0x670 [ 278.416607] do_syscall_64+0xf9/0x670 [ 278.420408] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.425677] RIP: 0033:0x45de59 [ 278.428865] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.447759] RSP: 002b:00007fef3b8d4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.455448] RAX: ffffffffffffffda RBX: 0000000000029b40 RCX: 000000000045de59 [ 278.462697] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 278.469955] RBP: 000000000118c0b0 R08: 0000000000000000 R09: 0000000000000000 [ 278.477228] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c07c [ 278.484479] R13: 00007ffcdebd7eaf R14: 00007fef3b8d59c0 R15: 000000000118c07c [ 278.495454] Mem-Info: [ 278.497898] active_anon:208266 inactive_anon:48593 isolated_anon:0 [ 278.497898] active_file:19196 inactive_file:29168 isolated_file:0 [ 278.497898] unevictable:10240 dirty:127 writeback:0 unstable:0 [ 278.497898] slab_reclaimable:18802 slab_unreclaimable:126534 [ 278.497898] mapped:61068 shmem:4318 pagetables:2059 bounce:0 [ 278.497898] free:1053562 free_pcp:652 free_cma:0 [ 278.545316] Node 0 active_anon:830932kB inactive_anon:194372kB active_file:76644kB inactive_file:116672kB unevictable:40960kB isolated(anon):0kB isolated(file):0kB mapped:244272kB dirty:508kB writeback:0kB shmem:17272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 921600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 278.576552] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 278.603335] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.630327] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 278.635344] Node 0 DMA32 free:419036kB min:35784kB low:44728kB high:53672kB active_anon:830932kB inactive_anon:194372kB active_file:76644kB inactive_file:116672kB unevictable:40960kB writepending:508kB present:3129332kB managed:2567340kB mlocked:40960kB kernel_stack:9152kB pagetables:8088kB bounce:0kB free_pcp:2652kB local_pcp:1320kB free_cma:0kB [ 278.669047] lowmem_reserve[]: 0 0 2 2 2 [ 278.673515] Node 0 Normal free:16kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2420kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.701882] lowmem_reserve[]: 0 0 0 0 0 [ 278.705887] Node 1 Normal free:3782348kB min:54068kB low:67584kB high:81100kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.736024] lowmem_reserve[]: 0 0 0 0 0 [ 278.740365] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 278.754231] Node 0 DMA32: 2793*4kB (UME) 995*8kB (UME) 967*16kB (UME) 435*32kB (UME) 307*64kB (UME) 247*128kB (UME) 118*256kB (UME) 78*512kB (UM) 27*1024kB (UM) 10*2048kB (UM) 49*4096kB (UM) = 418764kB [ 278.774212] Node 0 Normal: 0*4kB 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 278.785491] Node 1 Normal: 73*4kB (UE) 367*8kB (UE) 271*16kB (UME) 68*32kB (U) 15*64kB (UME) 12*128kB (UME) 5*256kB (UM) 7*512kB (UME) 3*1024kB (UM) 1*2048kB (U) 918*4096kB (M) = 3782348kB [ 278.802608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.811812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.820638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.829690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.838987] 52275 total pagecache pages [ 278.842960] 0 pages in swap cache [ 278.846404] Swap cache stats: add 0, delete 0, find 0/0 [ 278.851873] Free swap = 0kB [ 278.854891] Total swap = 0kB [ 278.857907] 1965979 pages RAM [ 278.861102] 0 pages HighMem/MovableOnly 06:41:04 executing program 1: r0 = epoll_create(0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000015e40)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 06:41:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:04 executing program 2: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x1c, 0x0, [{0x0, 0x3, 't'}, {0x0, 0x2}, {0x0, 0xf, "9bcd51f7b2fc646685c3216c4b"}, {0x0, 0x2}]}]}}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 06:41:04 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') 06:41:04 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:41:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@flushpolicy={0x38, 0x12, 0x4e326d0846e0c13d, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@multicast2, @in=@empty, 0x0, 0x0, 0x1}}]}, 0x38}, 0x8}, 0x0) [ 278.865105] 352020 pages reserved [ 278.870233] 0 pages cma reserved 06:41:04 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') 06:41:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') [ 278.980461] audit: type=1804 audit(1603176064.600:98): pid=13211 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/170/bus" dev="sda1" ino=16397 res=1 06:41:04 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:41:04 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 06:41:04 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@raw=[@initr0, @exit], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x82, &(0x7f00000000c0)=""/130, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x78) 06:41:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:04 executing program 4: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}) 06:41:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'macvlan0\x00', {0x2, 0x0, @dev}}) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 06:41:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x14, 0x0, 0x0}) [ 279.207536] audit: type=1804 audit(1603176064.840:99): pid=13229 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/171/bus" dev="sda1" ino=16387 res=1 06:41:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@generic={0x0, "a04d7ae146daf271bfe62237e34ff77a11dd64c25a6b104f35cd7d087fba94fc38b82f5123d322f92ab1e1db127b9084bdb0f0766cd9c74796352420223fb539184db2d32c1772519170ada3a00f31da5b1be1dba800d9b88c918b0b438059497fae4b500119012ba7868b53548b66747e6c1417d34c650332579a9129b5"}, 0x3d) 06:41:04 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x70, 0x8, 0xfc, 0xc1, 0x0, 0x4, 0x40, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0xcc6152bc2aae18f8, 0x68a, 0x9d66, 0x6, 0xb49, 0x4, 0x9}, 0xffffffffffffffff, 0xa, r1, 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) 06:41:05 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) [ 279.434182] audit: type=1804 audit(1603176065.070:100): pid=13249 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/172/bus" dev="sda1" ino=16403 res=1 06:41:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5460, 0x0) 06:41:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000240)=""/246, 0x2a, 0xf6, 0x1}, 0x20) 06:41:05 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={&(0x7f0000002680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000002700)=""/138, 0x2a, 0x8a, 0x1}, 0x20) 06:41:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8943, &(0x7f0000000100)) [ 279.623244] audit: type=1804 audit(1603176065.260:101): pid=13262 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/173/bus" dev="sda1" ino=16387 res=1 06:41:05 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:05 executing program 4: socketpair(0x29, 0x2, 0x0, &(0x7f0000001680)) 06:41:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8923, &(0x7f0000000100)) 06:41:05 executing program 1: socketpair(0x2, 0xa, 0x0, &(0x7f0000000200)) 06:41:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8902, 0x0) 06:41:05 executing program 4: mkdir(&(0x7f0000006d00)='./file0\x00', 0x0) [ 279.864344] audit: type=1804 audit(1603176065.500:102): pid=13279 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/174/bus" dev="sda1" ino=16406 res=1 06:41:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) 06:41:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89a0, 0x0) 06:41:05 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:05 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000009940)={&(0x7f00000083c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x80, &(0x7f00000086c0), 0x0, 0x0, 0x33}, 0x0) 06:41:05 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r1) 06:41:05 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000001680)) [ 280.106089] audit: type=1804 audit(1603176065.740:103): pid=13300 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/175/bus" dev="sda1" ino=16390 res=1 06:41:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000003900)={0x0, 0x0, 0x0}, 0x2002) close(r1) 06:41:05 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8913, &(0x7f0000000100)) 06:41:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @union]}}, 0x0, 0x36}, 0x20) [ 280.293944] audit: type=1804 audit(1603176065.930:104): pid=13316 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/176/bus" dev="sda1" ino=16400 res=1 06:41:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x40049409, 0x0) 06:41:06 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xc0189436, &(0x7f0000000100)) 06:41:06 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 280.455857] overlayfs: missing 'lowerdir' 06:41:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:06 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') close(r0) 06:41:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8980, &(0x7f0000000100)) 06:41:06 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') [ 280.547652] audit: type=1804 audit(1603176066.180:105): pid=13331 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/177/bus" dev="sda1" ino=16388 res=1 06:41:06 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:06 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="a1d8e1f924b1", @remote, @val, {@ipv6}}, 0x0) 06:41:06 executing program 2: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0), 0x4) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:41:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r0, r1) setsockopt$inet_mreqn(r2, 0x0, 0xc, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc) 06:41:06 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000140)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 06:41:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 06:41:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0xa, 0x0, 0x0) 06:41:06 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 280.858337] overlayfs: missing 'lowerdir' 06:41:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:06 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendmsg(r0, &(0x7f0000001380)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 06:41:06 executing program 5: connect$unix(0xffffffffffffff9c, 0x0, 0xa) 06:41:06 executing program 1: syz_emit_ethernet(0xa5, &(0x7f0000000180)={@random="a1d8e1f924b1", @remote, @val, {@ipv6}}, 0x0) 06:41:06 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0x46, 0x1c}, 0x1c, 0x0, 0x0, 0x0, 0xb0}, 0x20105) 06:41:06 executing program 0: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) 06:41:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x6cd, 0x0, 0x2}, 0xa0) 06:41:06 executing program 1: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00') [ 281.172810] overlayfs: missing 'lowerdir' 06:41:06 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 06:41:06 executing program 5: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @broadcast, @val, {@ipv4}}, 0x0) 06:41:06 executing program 0: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) 06:41:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:06 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000), 0x4) 06:41:06 executing program 4: syz_emit_ethernet(0xa6, &(0x7f0000000180)={@local, @broadcast, @val, {@ipv4}}, 0x0) 06:41:07 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) sendmsg(r0, &(0x7f0000000740)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) 06:41:07 executing program 2: open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0xfffffe00) 06:41:07 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 06:41:07 executing program 0: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) 06:41:07 executing program 4: syz_emit_ethernet(0x49, &(0x7f0000000000)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 06:41:07 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 06:41:07 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000040)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) [ 281.620337] overlayfs: missing 'lowerdir' 06:41:07 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000001100)={@broadcast, @local, @val, {@ipv4}}, 0x0) 06:41:07 executing program 0: r0 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:07 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 06:41:07 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000001700)=[{&(0x7f00000000c0)="3369914c34f4b48cf10c33b2118c6c21c53e0385dfb3067b6a445a0761e978de15129f0032d1aaaf99803d1bad706a9f9fe27a82008b76555ee8ebc0a0f8296d0e5ad2f2d2314a5d42af84fa05c07d7bd0a44322f354fc423058c810e7b35f1e86d033fc4a9378e964f3932cbeb0c2263d4503aaa2e50e37d3ef4ba4dd7fec9bc8f8a73f237ae22def1fbd3eccc14be2c8bcd482dc19a162ba43dda00a6960e90cdfba7435b5890ec61f5697dfb2033e019ca380856ca6a44b8692ac91773d59726c5e8e64d852761b1589d0f6ee458bcfcbbf481a38f19f8fd109021cd3c1301d1f9f55f77b087c8e3ca9cf14", 0xed}, {&(0x7f00000001c0)="7a47ff2102a15a84154d6d93b9f58d52a90b92bcf43f857e6538e6d2a6c4f053c45f79e45d6dd1fda7af24de56da7a51e7c47b42aa42b9212c0b00ef94d5437a9318b7417c526831c6303b6c216c3ab2d3f6e41f313b89ef5d05cd9e5ff45b12db0d400a35fde12f7c59be5522c8a07c2efe7b143ff44a4761d858b3a1908671545a6a526409a459fbcd69102b758a43ae2688ff2decfff9ee6989d283cfc69a18eaceaf8c74bc8cac66cca05031a4fe5052a3bb14bdcaae40bcc85d3648a81c73f9b912e7d0ca9c78052b7f5114024033c38e", 0xd3}, {&(0x7f00000002c0)="9f0bbacdb1c50381f34a00f985f9ab6da05aabfc71976e6426fb1c041b1ff6b4841d4883b24119ef378c43c7dc83618b7ae1efd971179bc38f391f5ceeb203871a835953165708225eed80f152e66d22f7ed800cb4c3168c48a80455bb618e3801ed42abb616ab17e63d9f789fcdddd3ee0a78cc91d082a7521fbbb4aa786f12259b8e51b203b8168ad99c824d93f4066961f66e9e8901c3e28f7b6c5a74ffe98ad23bb00cd0", 0xa6}, {&(0x7f0000000380)="65bb31835bc8466fb58bbce0b99c1a6f9b83f35a9d240fb83ed938e816809514292628a9888ba3415de1da292acaad3cd4f5ebdca0e1d7d1ff3b3061d160cdac75a3947597101000fa0608cdaf1196662eeda6f603a560ba2f8f0c31ea30143b4086366d30de4fde73fb05718f44f01dbb43a839a8738e9b907a693a3e59b947efb7f086f73897173e602623bcab7ad9446cfe3c1239eb9a4000457050ca9f0291d5c2dc731fa92b6609eb00a8ce457cd059de80b7bebf99120309ddabb25c171873c49ed69a80d891bf4caed2e96c48035d3ecd9649e5507c47229ba610247bcd67bad5ac1ac9963ae9", 0xea}, {&(0x7f0000000480)="f9456833e42f3f41d27984ce9add40444ef216a6eef550b8e2d0e73281608e63aa5be1d12a36742e9e81689cc08cac748fdf9402b33b35d7ef8c407e6f15a50a83bb48e8200a48dbc415939e63af78891f26bf17e235f5129ec2064e59fa8683990049da731fa8b58c5a58", 0x6b}, {&(0x7f0000001840)="bc000000000000002b5a0d4abab6fcf91c5c60ba58e9670e369a1cdd49ccdc85d8f45e0a8b36a61157c51c301a47f646098a6ffeb897415bac9ab5034657fa28835a0454964c3d2d1024e3038812452cc5c264ccdf355463ba1e1abeb5e533b174bb8a230d4170588db62976590689cd01a114fe7b5b14ef", 0x78}, {&(0x7f0000000580)="29c290", 0x3}, {&(0x7f00000005c0)="d82c245f1a440e74a14c10d857331d8fe4948a1e9d2114718ec8c121f98ccb39c22f22c3c73f56b93a376aa05d9a29566dd934354cef8e0053ed8e5732e9253716ac64c96704db4ea157d1979a1bfcaa56dff0e4be2ade3776397a90998049c90451028c8ce068525d2e1ce1ff4fb65eb4a5e91427cfcf21185d200d94e46a6d9d3ce12d778a0d01387a4c01b53b843caaf4fc289442fe65ca67128466050cf77a70fbfb10e41eb2195889af328bafe4f41e69c58993eee4109df274e47e121097c23e5e3b2ba706b0a2a19bdf802183b1389dee30567857176a581c735b2c", 0xdf}, {&(0x7f00000006c0)="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", 0x2ec}], 0x9}, 0x0) 06:41:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 06:41:07 executing program 1: ftruncate(0xffffffffffffffff, 0x0) 06:41:07 executing program 0: r0 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:07 executing program 4: pipe2(0x0, 0x400000) 06:41:07 executing program 5: connect$inet(0xffffffffffffff9c, &(0x7f0000000780)={0x2, 0x1}, 0xc) 06:41:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:07 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000002780)=""/99, &(0x7f0000002800)=0x63) 06:41:07 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) flock(r0, 0x0) 06:41:07 executing program 0: r0 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:07 executing program 4: rename(&(0x7f0000000000)='./file0\x00', 0x0) 06:41:07 executing program 5: fchownat(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:41:07 executing program 1: socket$inet(0x2, 0x3, 0x8) 06:41:07 executing program 4: select(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) 06:41:07 executing program 2: select(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) 06:41:07 executing program 5: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 06:41:07 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:08 executing program 2: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) 06:41:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:08 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000037c0)=@abs, 0x8) 06:41:08 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1}, 0x3, 0x7, 0xffffffffffffffff, 0x0, 0x7fff, 0xbf1f, 0x200, 0x1}) 06:41:08 executing program 5: getpgrp(0x0) sync() 06:41:08 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:08 executing program 2: mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) 06:41:08 executing program 1: accept$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0) 06:41:08 executing program 4: r0 = getpgrp(0x0) getpgid(r0) [ 282.645606] kauditd_printk_skb: 9 callbacks suppressed [ 282.645621] audit: type=1804 audit(1603176068.280:115): pid=13502 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/187/bus" dev="sda1" ino=15957 res=1 06:41:08 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) 06:41:08 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000001700)=[{&(0x7f00000000c0)='3', 0x1}, {0x0}, {&(0x7f00000006c0)="ab", 0x1}], 0x3}, 0x0) [ 282.709886] overlayfs: missing 'lowerdir' 06:41:08 executing program 5: symlink(&(0x7f0000000000)='./file0\x00', 0x0) 06:41:08 executing program 4: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x0, 0x0) 06:41:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:08 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:08 executing program 2: r0 = getpgrp(0x0) getpgid(r0) sync() 06:41:08 executing program 4: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@in6={0x18}, 0xc) 06:41:08 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000001700)=[{0x0}, {&(0x7f00000001c0)="7a47ff2102a15a84154d6d93b9f58d52a90b92bcf43f857e6538e6d2a6c4f053c45f79e45d6dd1fda7af24de56da7a51e7c47b42aa42b9212c0b00ef94d5437a9318b7417c526831c6303b6c216c3ab2d3f6e41f313b89ef5d05cd9e5ff45b12db0d400a35fde12f7c59be5522c8a07c2efe7b143ff44a4761d858b3a1908671545a6a526409a459fbcd69102b758a43ae2688ff2decfff9ee6989d283cfc69a18eaceaf8c74bc8cac66cca05031a4fe5052a3bb14bdcaae40bcc85d3648a81c73f9b912e7d0ca9c78052b7f5114024033c38e", 0xd3}, {&(0x7f00000002c0)="9f0bbacdb1c50381f34a00f985f9ab6da05aabfc71976e6426fb1c041b1ff6b4841d4883b24119ef378c43c7dc83618b7ae1efd971179bc38f391f5ceeb203871a835953165708225eed80f152e66d22f7ed800cb4c3168c48a80455bb618e3801ed42abb616ab17e63d9f789fcdddd3ee0a78cc91d082a7521fbbb4aa786f12259b8e51b203b8168ad99c824d93f4066961f66e9e8901c3e28f7b6c5a74", 0x9e}], 0x3}, 0x0) [ 282.877953] audit: type=1804 audit(1603176068.510:116): pid=13521 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/188/bus" dev="sda1" ino=16359 res=1 06:41:08 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, &(0x7f0000003700)="63b0dc8d343213fce1ad25634b026f00348dac45d4d5f0af5d07a5f74a46ce881ad9091412a6f42e5f11a01267664291daf6b5cc1efe376243b239f4e8b5ebe0f4b028887a8e4b4f22f82464c3089d28f1ab7bd077d4db07a2e0cccb5025cc7b025f08ba2be7ca02115ca1468cfbcdf13fa25fc7e0c172cd5ca5a89eed489664d5cbdcd732672b929008430d9083bd8e26", 0x91, 0x8, &(0x7f00000037c0)=@abs, 0x8) 06:41:08 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:08 executing program 4: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x7, 0x0) 06:41:08 executing program 2: semget(0x2, 0x2, 0xac5) 06:41:08 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x0) 06:41:08 executing program 1: shmget(0x2, 0x1000, 0x600, &(0x7f0000ffc000/0x1000)=nil) 06:41:08 executing program 5: accept$inet6(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) 06:41:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:08 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) [ 283.166567] audit: type=1804 audit(1603176068.800:117): pid=13542 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/189/bus" dev="sda1" ino=15973 res=1 06:41:08 executing program 1: pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x9, 0x0) 06:41:08 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:08 executing program 4: socket$inet(0x2, 0x0, 0x8) 06:41:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000040)=""/50, 0x32}, {0x0}, {0x0}], 0x4}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x2}, 0x10) shutdown(r3, 0x0) 06:41:08 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x0) shmdt(0x0) [ 283.407133] audit: type=1804 audit(1603176069.040:118): pid=13564 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/190/bus" dev="sda1" ino=16422 res=1 06:41:09 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:09 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000440)='./file0\x00', 0x807fb) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4097, 0x1001}], 0x1, 0x0, 0x0) [ 283.544751] audit: type=1804 audit(1603176069.180:119): pid=13576 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/191/bus" dev="sda1" ino=16422 res=1 06:41:09 executing program 4: fcntl$lock(0xffffffffffffffff, 0xd, 0xffffffffffffffff) [ 283.649029] overlayfs: missing 'lowerdir' 06:41:09 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, 0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:09 executing program 5: wait4(0x0, 0x0, 0x0, &(0x7f00000000c0)) 06:41:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:09 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r0, r1) readlinkat(r2, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 06:41:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870c8, 0x0) [ 283.772314] audit: type=1804 audit(1603176069.410:120): pid=13593 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/192/bus" dev="sda1" ino=15915 res=1 06:41:09 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, 0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:09 executing program 5: setrlimit(0x8, &(0x7f0000000000)) pipe2(0x0, 0x0) [ 283.931049] audit: type=1804 audit(1603176069.570:121): pid=13610 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/193/bus" dev="sda1" ino=15930 res=1 [ 284.026061] overlayfs: missing 'lowerdir' [ 284.248627] Bluetooth: hci0: command 0x0406 tx timeout 06:41:09 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000140), 0x4) 06:41:09 executing program 1: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0)) 06:41:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0x32}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x2}, 0x10) shutdown(r3, 0x0) 06:41:09 executing program 4: getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0xffffff56) 06:41:09 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, 0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, 0x0) 06:41:10 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_pts(r0, 0x0) [ 284.427106] audit: type=1804 audit(1603176070.060:122): pid=13627 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/194/bus" dev="sda1" ino=15916 res=1 06:41:10 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) 06:41:10 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 284.536708] overlayfs: missing 'lowerdir' 06:41:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:10 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$CHAR_RAW_ALIGNOFF(r0, 0x127a, 0x0) 06:41:10 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) 06:41:10 executing program 4: select(0x40, &(0x7f0000000cc0)={0x8}, 0x0, 0x0, 0x0) [ 284.639667] audit: type=1804 audit(1603176070.270:123): pid=13651 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/195/bus" dev="sda1" ino=15929 res=1 [ 284.885019] overlayfs: missing 'lowerdir' 06:41:10 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 06:41:10 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:10 executing program 1: add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 06:41:10 executing program 2: pipe2$9p(&(0x7f0000000140), 0x80800) 06:41:10 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 06:41:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:10 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x801, 0x0) 06:41:10 executing program 2: syz_open_dev$char_raw(&(0x7f00000000c0)='/dev/raw/raw#\x00', 0x1, 0x0) 06:41:11 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x10, &(0x7f0000000480)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:41:11 executing program 1: bpf$ITER_CREATE(0xc, 0x0, 0x0) [ 285.373765] audit: type=1804 audit(1603176071.010:124): pid=13688 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/196/bus" dev="sda1" ino=15888 res=1 06:41:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x4800}]}]}}, &(0x7f00000002c0)=""/156, 0x32, 0x9c, 0x1}, 0x20) 06:41:11 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:11 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) [ 285.446341] overlayfs: unrecognized mount option "lower" or missing value 06:41:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000002c0)=""/156, 0x26, 0x9c, 0x1}, 0x20) 06:41:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:11 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @empty, 'virt_wifi0\x00'}}, 0x80) 06:41:11 executing program 4: open$dir(&(0x7f0000000200)='./file0\x00', 0x41, 0x70) 06:41:11 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) 06:41:11 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 06:41:11 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x0) 06:41:11 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:11 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x450800, 0x0) 06:41:11 executing program 4: r0 = eventfd(0x0) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:41:11 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) [ 285.875131] overlayfs: unrecognized mount option "lower" or missing value 06:41:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:11 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) 06:41:11 executing program 2: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) 06:41:11 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:11 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 06:41:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000140)) 06:41:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 06:41:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) write$cgroup_pid(r1, 0x0, 0x0) 06:41:11 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:41:11 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:11 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 06:41:11 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) [ 286.259976] overlayfs: unrecognized mount option "lower" or missing value 06:41:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:11 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) dup2(r0, r1) 06:41:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x72540, 0x0) fstat(r0, &(0x7f00000000c0)) 06:41:11 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, 0x0, 0x0) 06:41:12 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:12 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) 06:41:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) 06:41:12 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xc56}, 0x0, 0x0, 0x0) 06:41:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) 06:41:12 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x0) 06:41:12 executing program 5: pipe2$9p(&(0x7f0000000040), 0x800) [ 286.836449] overlayfs: overlapping upperdir path 06:41:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4) 06:41:12 executing program 2: r0 = eventfd(0x7) read$eventfd(r0, &(0x7f0000000000), 0x8) 06:41:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000080) 06:41:12 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r0, 0x1269, 0x0) 06:41:12 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 06:41:12 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:41:12 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1}, 0x40) 06:41:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000200)={0x0, 0x40, 0x700}) 06:41:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @mcast2}}) [ 287.285426] overlayfs: overlapping upperdir path 06:41:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)={'ipvlan0'}, 0xa) 06:41:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x4}, 0x40) 06:41:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000200)={0x0, 0x40, 0x700}) 06:41:13 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 06:41:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:13 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vcs\x00', 0x220001, 0x0) signalfd4(r0, &(0x7f0000000e80), 0x8, 0x0) 06:41:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000}, 0x20) 06:41:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000020301030000000000000000030000000800044000000010080001000100002308000340000000000900020000"], 0x38}}, 0x0) 06:41:13 executing program 4: set_mempolicy(0x2, &(0x7f0000000080)=0x3, 0x100) syz_genetlink_get_family_id$team(0x0) 06:41:13 executing program 5: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7259, 0x58040) 06:41:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x30, 0x0, 0x0) 06:41:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000080)) 06:41:13 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0) 06:41:13 executing program 5: seccomp$SECCOMP_GET_ACTION_AVAIL(0x4, 0x0, 0x0) [ 287.865816] overlayfs: overlapping upperdir path [ 287.973645] kauditd_printk_skb: 11 callbacks suppressed [ 287.973659] audit: type=1804 audit(1603176073.610:136): pid=13882 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/208/bus" dev="sda1" ino=16464 res=1 06:41:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @mcast2, @private2, 0x80}) 06:41:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x128, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'wg0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local}}}, {{@ip={@empty, @private, 0x0, 0x0, 'veth1_macvtap\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) 06:41:13 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2}, 0x0) 06:41:13 executing program 4: syz_open_dev$dri(&(0x7f0000000dc0)='/dev/dri/card#\x00', 0x0, 0x80040) 06:41:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:13 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) [ 288.286521] audit: type=1804 audit(1603176073.920:137): pid=13900 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/209/bus" dev="sda1" ino=16467 res=1 [ 288.324669] overlayfs: failed to resolve './fil': -2 06:41:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:14 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x3b1a00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x0, 0x0) 06:41:14 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(0x0, 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'sit0\x00', 0x0}) 06:41:14 executing program 4: r0 = socket(0x25, 0x80001, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 288.516687] audit: type=1804 audit(1603176074.150:138): pid=13913 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/210/bus" dev="sda1" ino=16471 res=1 06:41:14 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(0x0, 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:14 executing program 1: bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) [ 288.820654] overlayfs: failed to resolve './fil': -2 [ 288.845126] audit: type=1804 audit(1603176074.480:139): pid=13927 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/211/bus" dev="sda1" ino=16450 res=1 [ 289.368934] Bluetooth: hci1: command 0x0406 tx timeout [ 289.376392] Bluetooth: hci2: command 0x0406 tx timeout [ 289.390073] Bluetooth: hci3: command 0x0406 tx timeout [ 289.395778] Bluetooth: hci4: command 0x0406 tx timeout 06:41:15 executing program 5: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) clock_gettime(0x0, &(0x7f00000000c0)) 06:41:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f7ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:41:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(0x0, 0xb4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:41:15 executing program 2: keyctl$KEYCTL_CAPABILITIES(0xb, 0x0, 0x0) 06:41:15 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) 06:41:15 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') [ 289.942350] audit: type=1804 audit(1603176075.580:140): pid=13950 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/212/bus" dev="sda1" ino=16491 res=1 06:41:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 06:41:15 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 06:41:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:15 executing program 2: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 06:41:15 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000006c0)='./file0\x00', 0x661000, 0x0) [ 290.087178] overlayfs: failed to resolve './fil': -2 06:41:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:15 executing program 2: getresgid(&(0x7f0000009140), &(0x7f0000009180), &(0x7f00000091c0)) [ 290.178295] audit: type=1804 audit(1603176075.810:141): pid=13979 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/213/bus" dev="sda1" ino=16493 res=1 06:41:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:15 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') 06:41:15 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 06:41:15 executing program 5: r0 = epoll_create(0x7) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) 06:41:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040), 0x0, 0x11, 0x0, 0x0) 06:41:16 executing program 1: clock_nanosleep(0x3, 0x0, &(0x7f0000000080), 0x0) 06:41:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x400c0, 0x0, 0x0) 06:41:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000440)={0x0, 0x3938700}) 06:41:16 executing program 2: pipe(&(0x7f0000001380)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 06:41:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:16 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x0, 0x0) 06:41:16 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) 06:41:16 executing program 2: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r1 = getgid() setregid(r1, r0) 06:41:16 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) 06:41:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 290.756140] overlayfs: failed to resolve './file': -2 06:41:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:16 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$CHAR_RAW_RESETZONE(r0, 0x40101283, 0x0) 06:41:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 06:41:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x20000000) 06:41:16 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) 06:41:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 06:41:16 executing program 5: timer_create(0x7, &(0x7f0000000300)={0x0, 0x29, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) [ 291.107699] audit: type=1804 audit(1603176076.740:142): pid=14046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/217/bus" dev="sda1" ino=16500 res=1 06:41:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 06:41:16 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 06:41:16 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$CHAR_RAW_ROSET(r0, 0x125d, 0x0) 06:41:16 executing program 2: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RESIZE(r0, 0x5609, 0x0) [ 291.374937] audit: type=1804 audit(1603176077.010:143): pid=14059 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/218/bus" dev="sda1" ino=16502 res=1 [ 291.411629] overlayfs: failed to resolve './file': -2 06:41:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:17 executing program 5: shmget$private(0x0, 0x800000, 0x54000000, &(0x7f00007fe000/0x800000)=nil) 06:41:17 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom(r0, &(0x7f0000000780)=""/101, 0x65, 0x0, 0x0, 0x0) 06:41:17 executing program 2: pipe(&(0x7f0000001380)={0xffffffffffffffff}) read$char_raw(r0, 0x0, 0x0) 06:41:17 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) 06:41:17 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 06:41:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 06:41:17 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, 0x0) 06:41:17 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) 06:41:17 executing program 5: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$CHAR_RAW_SECTGET(r0, 0x1267, 0x0) [ 291.635415] audit: type=1804 audit(1603176077.270:144): pid=14076 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/219/bus" dev="sda1" ino=16502 res=1 06:41:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) [ 291.723981] overlayfs: failed to resolve './file': -2 06:41:17 executing program 5: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$TCSETXW(r0, 0x5435, 0x0) 06:41:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:17 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 291.823225] audit: type=1804 audit(1603176077.460:145): pid=14089 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir114937252/syzkaller.GpgE8p/220/bus" dev="sda1" ino=16502 res=1 06:41:17 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 06:41:17 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9a043, 0x0) 06:41:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) 06:41:17 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000003900)='/proc/self\x00', 0x10800, 0x0) 06:41:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:18 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$CHAR_RAW_ROGET(r0, 0x125e, 0x0) 06:41:18 executing program 5: semctl$IPC_RMID(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) 06:41:18 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa20c0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x5) 06:41:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) 06:41:18 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x424800, 0x0) 06:41:18 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x751541, 0x0) 06:41:18 executing program 1: open$dir(&(0x7f0000000a00)='./file0\x00', 0x0, 0x0) 06:41:18 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x101000, 0x0) 06:41:18 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x311240, 0x0) 06:41:18 executing program 5: pipe(&(0x7f0000001380)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 06:41:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:18 executing program 0: setrlimit(0x8, &(0x7f0000000000)={0x100000000000003, 0x100000000000000}) 06:41:18 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 06:41:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) 06:41:18 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa20c0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x4000, 0x2) 06:41:18 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x100) 06:41:18 executing program 0: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) 06:41:18 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, 0x0) 06:41:18 executing program 5: pipe(&(0x7f0000001380)={0xffffffffffffffff}) bind(r0, 0x0, 0x0) 06:41:18 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000001500)='/dev/urandom\x00', 0x200000, 0x0) 06:41:18 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8}}], 0x1, 0x0) 06:41:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:18 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000004b40)='./file0\x00', 0x0, 0x0, 0x0, 0x4) 06:41:18 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0xc00) 06:41:18 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 06:41:18 executing program 5: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, 0x0) 06:41:19 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, 0x0) 06:41:19 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) 06:41:19 executing program 0: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 06:41:19 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff}) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 06:41:19 executing program 5: semget(0x2, 0x0, 0x206) 06:41:19 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9a041, 0x0) 06:41:19 executing program 5: munmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000) 06:41:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 06:41:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 06:41:19 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, 0x0, 0x0, 0x0) 06:41:19 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000340)={{0x77359400}}, 0x0) 06:41:19 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x400) 06:41:19 executing program 4: r0 = inotify_init() mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 06:41:19 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={0x0}) 06:41:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) getpeername$unix(r0, 0x0, 0x0) 06:41:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000080)) 06:41:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80bc0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 06:41:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="8e", 0x1, 0x80, 0x0, 0x0) 06:41:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:20 executing program 5: pipe(&(0x7f0000001380)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 06:41:20 executing program 2: link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 06:41:20 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 06:41:20 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x2500, 0x0) 06:41:20 executing program 0: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffd000/0x2000)=nil) 06:41:20 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x18040, 0x2) 06:41:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000001e80)) 06:41:20 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 06:41:20 executing program 5: newfstatat(0xffffffffffffff9c, &(0x7f000000abc0)='./file0\x00', 0x0, 0x0) 06:41:20 executing program 4: lsetxattr$security_capability(&(0x7f0000001980)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 06:41:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) 06:41:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:20 executing program 0: mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 06:41:20 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:41:20 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000004900)) 06:41:20 executing program 5: timer_create(0x0, 0x0, &(0x7f00000001c0)) 06:41:20 executing program 2: clock_getres(0x4, &(0x7f0000000080)) 06:41:20 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000003a00)='./file0\x00', 0x140, 0x0) 06:41:20 executing program 2: pipe(&(0x7f0000001380)={0xffffffffffffffff}) inotify_rm_watch(r0, 0x0) 06:41:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x20004001, 0x0, 0x0) 06:41:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, 0x0) 06:41:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:41:20 executing program 2: utimensat(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', 0x0, 0x0) 06:41:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:21 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1e8381, 0x0) 06:41:21 executing program 4: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) 06:41:21 executing program 5: unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) 06:41:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x962d2b7472eddabd) 06:41:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept(r0, 0x0, 0x0) 06:41:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) 06:41:21 executing program 5: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$PIO_FONT(r0, 0x4b61, 0x0) 06:41:21 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) 06:41:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/142, 0x8e}], 0x1}}], 0x1, 0x0, &(0x7f0000000440)={0x0, 0x3938700}) 06:41:21 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x240, 0x1b4) 06:41:21 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 06:41:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:21 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvfrom(r1, &(0x7f0000000600)=""/4096, 0x1000, 0x20, 0x0, 0x0) 06:41:21 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) 06:41:21 executing program 1: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x1122, 0x0, 0x0) 06:41:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto(r0, &(0x7f00000013c0)="72e184f93f3e568a986afad10f89914286890b518548902ce4ba7c7664e0182ddabb1fac1a7013b0d44a44a1b586b8f8a9fa63485151f586115d01a8d9e87212fb4b88851ed365c7c61cae4d2175c069cf58330f7516577906b62e57dd610efee225fdca987fcdc3c6c98a9cd4ba3a203393fc7bb252df66b3b0acc78bcd5d7b4456c3579ada0dc949642355e557911e799c2d25800531d613b59be7f604a0eef61bad826e66996c90d0a1962a05ac338d9df1e9b440a2ffe8b55af41910ddc68394", 0xc2, 0x40000, &(0x7f0000000100)=@ethernet, 0xfffffea0) 06:41:21 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 06:41:21 executing program 0: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 06:41:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 06:41:21 executing program 5: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 06:41:22 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f00000000c0)="83", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) 06:41:22 executing program 4: timer_create(0x0, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240)) 06:41:22 executing program 1: r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) fstat(r0, &(0x7f0000000200)) 06:41:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 06:41:22 executing program 5: r0 = epoll_create(0x3) epoll_pwait(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x8) 06:41:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(0x0, 0x0) 06:41:22 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 06:41:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000002c0), 0x0, 0x20040001, 0x0, 0x0) 06:41:22 executing program 2: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 06:41:22 executing program 5: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0x0) 06:41:22 executing program 1: getdents64(0xffffffffffffff9c, 0x0, 0x0) 06:41:22 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$CHAR_RAW_PBSZGET(r0, 0x127b, 0x0) 06:41:22 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 06:41:22 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x7000) 06:41:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 06:41:22 executing program 0: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETX(r0, 0x5433, 0x0) 06:41:22 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x236240, 0x0) 06:41:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x40000001, 0x0) 06:41:22 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_raw(r0, 0x0, 0x0) 06:41:22 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x519343, 0x2) 06:41:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e40), &(0x7f0000001e80)=0xc) 06:41:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(0x0, 0x0) 06:41:22 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa20c0, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') 06:41:22 executing program 4: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f00000007c0)=[{0x0, 0x40}], 0x1) 06:41:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 06:41:22 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 06:41:22 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 06:41:22 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x600102, 0x1) 06:41:22 executing program 2: clock_nanosleep(0x0, 0x0, &(0x7f0000000080), 0x0) 06:41:22 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x4841, 0x0) 06:41:22 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:41:23 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9a041, 0x18c) 06:41:23 executing program 5: faccessat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0) 06:41:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(0x0, 0x0) 06:41:23 executing program 2: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 06:41:23 executing program 0: mknod$loop(&(0x7f0000000580)='./file0\x00', 0x2, 0x1) 06:41:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 06:41:23 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 06:41:23 executing program 1: r0 = epoll_create(0x3) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:41:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 06:41:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 06:41:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 06:41:23 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) recvfrom(r2, &(0x7f0000000600)=""/4096, 0x1000, 0x21, 0x0, 0x0) 06:41:23 executing program 4: setreuid(0xee01, 0xee00) 06:41:23 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 06:41:23 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x240, 0x0) 06:41:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000500)='net_prio.ifpriomap\x00', 0x2, 0x0) 06:41:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/220, 0xdc) 06:41:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 06:41:23 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') 06:41:23 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x2f63950f726d08e8, 0x0) 06:41:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) 06:41:23 executing program 5: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x100800) 06:41:23 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$CHAR_RAW_RRPART(r0, 0x125f, 0x0) 06:41:23 executing program 1: mount$9p_virtio(&(0x7f0000000080)='syz\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2000004, 0x0) 06:41:23 executing program 2: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$CHAR_RAW_PG(r0, 0x1269, 0x0) 06:41:23 executing program 3: setxattr$trusted_overlay_redirect(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 06:41:23 executing program 5: pipe(&(0x7f0000003b80)={0xffffffffffffffff}) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) 06:41:23 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) 06:41:24 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) pipe(&(0x7f0000000640)) pipe(&(0x7f0000000640)) pipe(&(0x7f0000000640)) sendmsg$netlink(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)={0x10}, 0x10}], 0x1}, 0x0) 06:41:24 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 06:41:24 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa20c0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80c0, 0x0) 06:41:24 executing program 4: pipe(&(0x7f0000001380)={0xffffffffffffffff}) ioctl$KDGKBENT(r0, 0x4b46, 0x0) 06:41:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000a440)) 06:41:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000a480)) 06:41:24 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff}) unlinkat(r0, &(0x7f00000006c0)='./file0\x00', 0x0) 06:41:24 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x2080, 0x0) 06:41:24 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x10, 0x0) 06:41:24 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 06:41:24 executing program 3: 06:41:24 executing program 4: 06:41:24 executing program 1: 06:41:24 executing program 5: 06:41:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80bc0, 0x0) futimesat(r0, 0x0, 0x0) 06:41:24 executing program 2: 06:41:24 executing program 3: 06:41:24 executing program 4: 06:41:24 executing program 1: 06:41:24 executing program 5: 06:41:24 executing program 2: 06:41:24 executing program 3: 06:41:24 executing program 4: 06:41:24 executing program 0: 06:41:24 executing program 1: 06:41:24 executing program 2: 06:41:24 executing program 5: 06:41:24 executing program 3: 06:41:24 executing program 4: 06:41:24 executing program 0: 06:41:24 executing program 1: 06:41:24 executing program 5: 06:41:24 executing program 2: 06:41:24 executing program 3: 06:41:24 executing program 4: 06:41:24 executing program 1: 06:41:24 executing program 5: 06:41:24 executing program 0: 06:41:24 executing program 2: 06:41:24 executing program 4: 06:41:24 executing program 3: 06:41:24 executing program 5: 06:41:24 executing program 0: 06:41:24 executing program 1: 06:41:24 executing program 2: 06:41:24 executing program 4: 06:41:24 executing program 3: 06:41:24 executing program 2: 06:41:25 executing program 5: 06:41:25 executing program 1: 06:41:25 executing program 0: 06:41:25 executing program 4: 06:41:25 executing program 3: 06:41:25 executing program 2: 06:41:25 executing program 5: 06:41:25 executing program 1: 06:41:25 executing program 0: 06:41:25 executing program 4: 06:41:25 executing program 2: 06:41:25 executing program 3: 06:41:25 executing program 5: 06:41:25 executing program 1: 06:41:25 executing program 0: 06:41:25 executing program 3: 06:41:25 executing program 4: 06:41:25 executing program 2: 06:41:25 executing program 5: 06:41:25 executing program 3: 06:41:25 executing program 1: 06:41:25 executing program 0: 06:41:25 executing program 4: 06:41:25 executing program 5: 06:41:25 executing program 2: 06:41:25 executing program 5: 06:41:25 executing program 4: 06:41:25 executing program 3: 06:41:25 executing program 1: 06:41:25 executing program 0: 06:41:25 executing program 2: 06:41:25 executing program 5: 06:41:25 executing program 3: 06:41:25 executing program 1: 06:41:25 executing program 4: 06:41:25 executing program 0: 06:41:25 executing program 2: 06:41:25 executing program 3: 06:41:25 executing program 5: 06:41:25 executing program 1: 06:41:25 executing program 4: 06:41:25 executing program 0: 06:41:25 executing program 2: 06:41:25 executing program 3: 06:41:25 executing program 5: 06:41:25 executing program 0: 06:41:25 executing program 4: 06:41:25 executing program 1: 06:41:26 executing program 2: 06:41:26 executing program 0: 06:41:26 executing program 3: 06:41:26 executing program 5: 06:41:26 executing program 1: 06:41:26 executing program 2: 06:41:26 executing program 4: 06:41:26 executing program 0: 06:41:26 executing program 3: 06:41:26 executing program 2: 06:41:26 executing program 5: 06:41:26 executing program 1: 06:41:26 executing program 4: 06:41:26 executing program 1: 06:41:26 executing program 0: 06:41:26 executing program 2: 06:41:26 executing program 3: 06:41:26 executing program 4: 06:41:26 executing program 5: 06:41:26 executing program 2: 06:41:26 executing program 1: 06:41:26 executing program 3: 06:41:26 executing program 5: 06:41:26 executing program 0: 06:41:26 executing program 4: 06:41:26 executing program 2: 06:41:26 executing program 1: 06:41:26 executing program 0: 06:41:26 executing program 3: 06:41:26 executing program 5: 06:41:26 executing program 4: 06:41:26 executing program 2: 06:41:26 executing program 1: 06:41:26 executing program 3: 06:41:26 executing program 2: 06:41:26 executing program 5: 06:41:26 executing program 0: 06:41:26 executing program 4: 06:41:26 executing program 1: 06:41:26 executing program 3: 06:41:26 executing program 2: 06:41:26 executing program 0: 06:41:26 executing program 5: 06:41:26 executing program 4: 06:41:26 executing program 3: 06:41:26 executing program 2: 06:41:26 executing program 0: 06:41:26 executing program 1: 06:41:26 executing program 5: 06:41:27 executing program 4: 06:41:27 executing program 2: 06:41:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) 06:41:27 executing program 0: 06:41:27 executing program 1: 06:41:27 executing program 5: 06:41:27 executing program 3: 06:41:27 executing program 2: 06:41:27 executing program 4: 06:41:27 executing program 1: 06:41:27 executing program 0: 06:41:27 executing program 5: 06:41:27 executing program 3: 06:41:27 executing program 0: 06:41:27 executing program 2: 06:41:27 executing program 4: 06:41:27 executing program 1: 06:41:27 executing program 5: 06:41:27 executing program 3: 06:41:27 executing program 2: 06:41:27 executing program 0: 06:41:27 executing program 4: 06:41:27 executing program 3: 06:41:27 executing program 1: 06:41:27 executing program 5: 06:41:27 executing program 2: 06:41:27 executing program 3: 06:41:27 executing program 0: 06:41:27 executing program 4: 06:41:27 executing program 1: 06:41:27 executing program 5: 06:41:27 executing program 2: 06:41:27 executing program 4: 06:41:27 executing program 1: 06:41:27 executing program 3: 06:41:27 executing program 0: 06:41:27 executing program 5: 06:41:27 executing program 2: 06:41:27 executing program 1: 06:41:27 executing program 4: 06:41:27 executing program 3: 06:41:27 executing program 0: 06:41:27 executing program 5: 06:41:27 executing program 2: 06:41:27 executing program 1: 06:41:27 executing program 3: 06:41:27 executing program 4: 06:41:27 executing program 2: 06:41:27 executing program 5: 06:41:27 executing program 0: 06:41:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000040)) 06:41:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', 0x0}) 06:41:28 executing program 3: 06:41:28 executing program 2: 06:41:28 executing program 0: 06:41:28 executing program 5: [ 302.429805] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 06:41:28 executing program 3: keyctl$KEYCTL_CAPABILITIES(0xd, 0x0, 0x0) 06:41:28 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) [ 302.511984] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 06:41:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 06:41:28 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) 06:41:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 06:41:28 executing program 0: syz_open_dev$evdev(&(0x7f0000000a00)='/dev/input/event#\x00', 0x0, 0x0) 06:41:28 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)={0x0, 0x41, "1447e3ab9777376272f5446a257c5abc68396767fbd9f777b5fee902e98f1d66c441f68ec77bad52ee01a515611fb529c95caade4d73951c0d1b2ce950471fb791"}) 06:41:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:41:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x1, &(0x7f0000000180)=@raw=[@func], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:41:28 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') 06:41:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 06:41:28 executing program 0: bpf$PROG_LOAD(0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:41:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f96765ce27b90300060000000000000000b738000000570035f4c38422a3bc822000050000000402030006000000000000000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03"], 0xd8) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 06:41:28 executing program 2: openat$zero(0xffffffffffffff9c, 0x0, 0x410000, 0x0) 06:41:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) 06:41:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x9}]}) 06:41:28 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x4101, 0x0) 06:41:28 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 06:41:28 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 06:41:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:41:29 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 06:41:29 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f000000d3c0)=[{{0x0, 0x0, &(0x7f00000098c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x1, 0x0) 06:41:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 06:41:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) 06:41:29 executing program 5: bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) [ 303.655818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:41:29 executing program 0: getrusage(0x0, &(0x7f0000000140)) 06:41:29 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, 0x0, 0x0) 06:41:29 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @window={0x3, 0x3}, @sack={0x5, 0x2}, @mptcp=@generic={0x8, 0xe, "7dbbb33612c439e0c1284c22"}]}}}}}}}}, 0x0) [ 303.773057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:41:29 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)={0x8}) 06:41:29 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 06:41:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 06:41:30 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @window={0x3, 0x3}, @sack={0x5, 0x2}, @mptcp=@generic={0x8, 0xd, "7dbbb33612c439e0c1284c"}]}}}}}}}}, 0x0) 06:41:30 executing program 4: clock_gettime(0x0, &(0x7f0000000840)) 06:41:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:41:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) 06:41:30 executing program 2: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "afdb063f6529c10ed310b3a95666f3df79855cb382037fc99e698c8ce9c90991da945c8880c9123a488a5f5b8fcd9d90bc75c48b390da5b8fa04ec2211272c16"}}}}, 0x0) 06:41:30 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x121000, 0x0) 06:41:30 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6000002, 0x0, 0x2000000}, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 06:41:30 executing program 0: keyctl$KEYCTL_CAPABILITIES(0x6, 0x0, 0x0) 06:41:30 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @window={0x3, 0x3}, @sack={0x5, 0x2}, @mptcp=@generic={0x8, 0xe, "7dbbb33612c439e0c1284c22"}]}}}}}}}}, 0x0) 06:41:30 executing program 3: socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40286608, 0x0) 06:41:30 executing program 0: bpf$PROG_LOAD(0x9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:41:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43941, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 305.298743] kauditd_printk_skb: 2 callbacks suppressed [ 305.298756] audit: type=1800 audit(1603176090.940:148): pid=14979 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16540 res=0 [ 305.785525] audit: type=1800 audit(1603176091.420:149): pid=14979 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16540 res=0 [ 306.176876] EXT4-fs warning (device sda1): ext4_group_add:1680: No reserved GDT blocks, can't resize 06:41:32 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getresuid(&(0x7f00000001c0), 0x0, 0x0) 06:41:32 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:41:32 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x420600, 0x0) 06:41:32 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @window={0x3, 0x3}, @sack={0x5, 0x2}, @mptcp=@generic={0x8, 0xe, "7dbbb33612c439e0c1284c22"}]}}}}}}}}, 0x0) 06:41:32 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6000002, 0x0, 0x2000000}, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 06:41:32 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc01047d0, 0x0) 06:41:32 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x2, 0xb05400) 06:41:33 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 06:41:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0xfffd}]}) [ 307.746620] audit: type=1800 audit(1603176093.380:150): pid=15033 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16556 res=0 [ 307.875283] EXT4-fs warning (device sda1): ext4_group_add:1680: No reserved GDT blocks, can't resize 06:41:33 executing program 3: select(0x3f, &(0x7f0000000040)={0x7fff}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 06:41:33 executing program 1: 06:41:33 executing program 2: syz_open_dev$usbmon(0x0, 0x0, 0x0) 06:41:33 executing program 0: init_module(&(0x7f0000000580)='!>\x00\xd9\x12\xf7\xe6\xe4-Y\x01\xb1\xc8\xcf\xf0\'\xe8\xcbx\xcf\x0f\x9b:\x10\xd8\x1d\xd6.c\x99\xd9\x84\xf6D1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x85\xbd\xa4\xe8\n\xc9\xdb\xbd\xb5\"\x01G\xe2\x18Q\xe6(\x8fJ\x9eK\fJO\x9boM68\x00\x00\x00\x00\x00\x00\x00\x84\x8d\xca\x8fV~\x1d0\xdc \x8c<\xce\xee\x18\xd7\xa1\f5\x8f\x86`\x16\x83\x01\xdb\xb6V\b\xa3\x99\xa7\xeb\xce\xc7l\xa2\xc1d-\x00\xd9g\xf4\xa3\xed\x94\x1e!\x0e\x1e\x1c\x11\xf5\xee\x17\x1f\xc8\xb4\x8e\xd4 \xec\x9e\x99E\x0f\x88\xf7\x98%K\xf7\xd7\xf7\xd5\xd0\x95r\x9f\xbb\n\x9a\n\x8br`@\x80\xe9\x1a.}9=\xcf?B\x88\xae(\x15\x8f\xf0\xe7\xd5\xaa\x97)?\xcbN\xdcAw\\\xa2[\xcd\x86\t%{)\x7f>^\xf92@[S\x11\xfeN\xd7-\xec\xfe\x83\x1b\xb0\xe0\x92G\'\x04\xd4\xdcK\xe7\x00|:O\b\xa0\xaf\xfd\xff\xd2rLw(P\xc9\xa7\xa2MB\x16kE\xcc\x10Qb@hH\x93\x8e\xec&i\xad\xa0\xae\xc8\x06\xe1c\x9dGi\xfa\xde\xa7Qg\x01\xab\xfa\xe6\xdb9fbT\"\xe7\xb1\xbf)HU\x9c\x1e\f<\xda\xa54\x10q\xba\x02m\x06,?G\x03_\x9eI\xd1\x8e\xa6\xfb\xfe2\xe1LN(\xa8\xd3e\xb2\x00\xb0\x95\xb7dY\xe4t\xeeFc\xcb\xda\xa8C\x03k\xb3\xc9|F\xc1S\xfc\xab2rDft\xa4\xd4\x82\xc7\xa0q\xf6*\xf5lI(h\x95d\xcc\xca\xb1K\xf3\xa3<=}\xd6\xf9\xb1\xa7\xdc^\\\xfa_\xdb\b\xb3[]\xbd|\xce4/\xbf\xe5\xd4\xd8k&\x11\xe2f\x17\xc2\x85\xf6y/g]\xa7\x9d?\xe7w\x19\xf9\\\rm\xc4}z\xaf\x1am\xd9\x05q\x00'/472, 0x1d8, 0x0) 06:41:33 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @window={0x3, 0x3}, @sack={0x5, 0x2}, @mptcp=@generic={0x8, 0xe, "7dbbb33612c439e0c1284c22"}]}}}}}}}}, 0x0) 06:41:33 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6000002, 0x0, 0x2000000}, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 06:41:34 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000009c0)='ns/net\x00') 06:41:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 308.655760] audit: type=1800 audit(1603176094.290:151): pid=15094 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16593 res=0 [ 308.882404] EXT4-fs warning (device sda1): ext4_group_add:1680: No reserved GDT blocks, can't resize 06:41:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:36 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6000002, 0x0, 0x2000000}, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 06:41:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 310.965074] overlayfs: failed to resolve './file': -2 06:41:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 311.031801] overlayfs: failed to resolve './fil': -2 [ 311.123040] audit: type=1800 audit(1603176096.760:152): pid=15169 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15797 res=0 [ 311.193612] EXT4-fs warning (device sda1): ext4_group_add:1680: No reserved GDT blocks, can't resize 06:41:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 311.580315] overlayfs: missing 'lowerdir' 06:41:37 executing program 2 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 311.708208] overlayfs: overlapping upperdir path 06:41:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x201, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:37 executing program 3 (fault-call:6 fault-nth:0): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 312.307419] audit: type=1804 audit(1603176097.940:153): pid=15205 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/277/bus" dev="sda1" ino=15996 res=1 [ 312.333883] FAULT_INJECTION: forcing a failure. [ 312.333883] name failslab, interval 1, probability 0, space 0, times 1 06:41:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup(r3) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5008001df5cd1d1d1e3a8ccec31b3455182a98eeb132e58c2eb3cf46230d7e193422df0fea246f008000009fddd4f1fc16d2bccabff1fce32bf6bc17ae9dd06eaa80e1723d37303351c5d5bec5aabab2585dd4602fa33770eb92cee5b84f516585736f1de824b5425b29aa01a724b98219e7e42fe0132e64c3deacb01079dbb12069012f35d83804a330587b", @ANYRES16=r7, @ANYBLOB="20002dbd7000fddb0500040006000000000000d7ca7bf31ddcba7e0073797a32000000000500040f010000000900010073797a3200"/68], 0x50}, 0x1, 0x0, 0x0, 0x24040854}, 0x4005) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000040", @ANYRES16=r7, @ANYBLOB="000126bd7000fedbdf250100000005000400020000000900030073797a30000000000900030073797a30000000000900030073797a31000000000900030073797a3000000000050004000100000014000200766574683000000000000000000000000900010073797a3000000000"], 0x74}, 0x1, 0x0, 0x0, 0x20044091}, 0x20000800) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x44020}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20080004}, 0x24044184) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x88, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000001}, 0x814) r8 = open(&(0x7f0000000000)='./file0\x00', 0x8c2c5, 0x0) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r8, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) r10 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x10000) sendfile(r8, r9, 0x0, 0x10000) [ 312.391887] CPU: 1 PID: 15205 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 312.399806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.409214] Call Trace: [ 312.411815] dump_stack+0x22c/0x33e [ 312.416171] should_fail.cold+0xa/0x2f [ 312.420068] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 312.425252] __should_failslab+0x153/0x1b6 [ 312.429715] should_failslab+0x5/0xf [ 312.433507] kmem_cache_alloc+0x2b1/0x4a0 [ 312.437668] ? memset+0x20/0x40 [ 312.440984] vm_area_dup+0x1c/0x170 [ 312.444730] __split_vma+0xa5/0x550 [ 312.449071] do_munmap+0x2f0/0xe10 [ 312.452636] ? mark_held_locks+0xf0/0xf0 [ 312.456720] mmap_region+0x1f1/0x1510 [ 312.460533] ? cap_mmap_addr+0x50/0x350 [ 312.464518] ? vm_brk+0x20/0x20 [ 312.468066] ? security_mmap_addr+0x73/0x90 [ 312.472406] ? get_unmapped_area+0x296/0x3b0 [ 312.476930] do_mmap+0x8e8/0x1080 [ 312.480506] vm_mmap_pgoff+0x197/0x200 [ 312.485173] ? vma_is_stack_for_current+0xc0/0xc0 [ 312.491309] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 312.498705] ksys_mmap_pgoff+0x2d1/0x660 [ 312.502871] ? find_mergeable_anon_vma+0x260/0x260 [ 312.507843] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 312.513253] ? trace_hardirqs_off_caller+0x6e/0x210 [ 312.518295] ? do_syscall_64+0x21/0x670 [ 312.522314] do_syscall_64+0xf9/0x670 [ 312.526150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.531551] RIP: 0033:0x45de59 [ 312.534783] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.553689] RSP: 002b:00007f8ba5da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 312.561409] RAX: ffffffffffffffda RBX: 0000000000021200 RCX: 000000000045de59 [ 312.568681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020003000 [ 312.576102] RBP: 00007f8ba5da5ca0 R08: 0000000000000006 R09: 0000000000000000 [ 312.583387] R10: 0000000000001012 R11: 0000000000000246 R12: 0000000000000000 [ 312.590658] R13: 00007ffc3e45188f R14: 00007f8ba5da69c0 R15: 000000000118bf2c [ 312.644171] audit: type=1804 audit(1603176098.270:154): pid=15208 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir722553074/syzkaller.RfmsRk/325/file0" dev="sda1" ino=16056 res=1 06:41:38 executing program 3 (fault-call:6 fault-nth:1): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 312.941232] overlayfs: missing 'lowerdir' 06:41:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x2b000}], 0x4, 0x402400, 0x1800) [ 313.041401] audit: type=1804 audit(1603176098.280:155): pid=15208 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir722553074/syzkaller.RfmsRk/325/file0" dev="sda1" ino=16056 res=1 06:41:38 executing program 1: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) [ 313.125663] FAULT_INJECTION: forcing a failure. [ 313.125663] name failslab, interval 1, probability 0, space 0, times 0 06:41:38 executing program 5: socketpair(0x1, 0x0, 0x84, &(0x7f0000000000)) 06:41:38 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6000002, 0x0, 0x2000000}, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x3c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @window={0x3, 0x3}, @sack={0x5, 0x2}, @mptcp=@generic={0x8, 0xf, "7dbbb33612c439e0c1284c2295"}]}}}}}}}}, 0x0) [ 313.176838] CPU: 1 PID: 15219 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 313.184765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.195067] Call Trace: [ 313.198107] dump_stack+0x22c/0x33e [ 313.201755] should_fail.cold+0xa/0x2f [ 313.205794] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 313.210948] ? find_held_lock+0x2d/0x110 [ 313.215025] ? should_fail+0x142/0x7d8 [ 313.218923] ? fs_reclaim_release+0xd0/0x110 [ 313.223348] __should_failslab+0x153/0x1b6 [ 313.227598] should_failslab+0x5/0xf [ 313.231331] kmem_cache_alloc+0x43/0x4a0 [ 313.235755] anon_vma_clone+0xe0/0x5e0 [ 313.239681] __split_vma+0x16f/0x550 [ 313.243523] do_munmap+0x2f0/0xe10 [ 313.247080] ? mark_held_locks+0xf0/0xf0 [ 313.251156] mmap_region+0x1f1/0x1510 [ 313.255850] ? cap_mmap_addr+0x50/0x350 [ 313.259934] ? vm_brk+0x20/0x20 [ 313.263243] ? security_mmap_addr+0x73/0x90 [ 313.267768] ? get_unmapped_area+0x296/0x3b0 [ 313.272189] do_mmap+0x8e8/0x1080 06:41:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) [ 313.275655] vm_mmap_pgoff+0x197/0x200 [ 313.279558] ? vma_is_stack_for_current+0xc0/0xc0 [ 313.284409] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 313.288658] ksys_mmap_pgoff+0x2d1/0x660 [ 313.292738] ? find_mergeable_anon_vma+0x260/0x260 [ 313.297692] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 313.303066] ? trace_hardirqs_off_caller+0x6e/0x210 [ 313.308090] ? do_syscall_64+0x21/0x670 [ 313.312077] do_syscall_64+0xf9/0x670 [ 313.315895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.321187] RIP: 0033:0x45de59 06:41:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 313.324378] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.343492] RSP: 002b:00007f8ba5da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 313.351211] RAX: ffffffffffffffda RBX: 0000000000021200 RCX: 000000000045de59 [ 313.358580] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020003000 [ 313.365866] RBP: 00007f8ba5da5ca0 R08: 0000000000000006 R09: 0000000000000000 06:41:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x800000, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) recvfrom$l2tp6(r1, &(0x7f00000000c0)=""/56, 0x38, 0x101, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x20) [ 313.373168] R10: 0000000000001012 R11: 0000000000000246 R12: 0000000000000001 [ 313.380442] R13: 00007ffc3e45188f R14: 00007f8ba5da69c0 R15: 000000000118bf2c [ 313.413670] EXT4-fs warning (device sda1): ext4_group_add:1680: No reserved GDT blocks, can't resize 06:41:39 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) [ 313.444433] audit: type=1804 audit(1603176098.760:156): pid=15219 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/278/bus" dev="sda1" ino=15996 res=1 06:41:39 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000006840)) [ 313.586228] audit: type=1800 audit(1603176099.050:157): pid=15239 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15784 res=0 06:41:39 executing program 3 (fault-call:6 fault-nth:2): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:39 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') 06:41:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2062b041}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 06:41:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1}, 0x4) [ 313.783652] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 313.797341] audit: type=1804 audit(1603176099.430:158): pid=15259 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/279/bus" dev="sda1" ino=16042 res=1 [ 313.799371] FAULT_INJECTION: forcing a failure. [ 313.799371] name failslab, interval 1, probability 0, space 0, times 0 [ 313.870591] EXT4-fs (sda1): re-mounted. Opts: journal_checksum,,errors=continue [ 314.040544] CPU: 0 PID: 15259 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 314.048614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.057982] Call Trace: [ 314.060582] dump_stack+0x22c/0x33e [ 314.064241] should_fail.cold+0xa/0x2f [ 314.068140] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 314.073260] __should_failslab+0x153/0x1b6 [ 314.077507] should_failslab+0x5/0xf [ 314.081231] kmem_cache_alloc+0x2b1/0x4a0 [ 314.085392] vm_area_dup+0x1c/0x170 [ 314.089029] __split_vma+0xa5/0x550 [ 314.092682] do_munmap+0x369/0xe10 [ 314.096233] ? mark_held_locks+0xf0/0xf0 [ 314.100310] mmap_region+0x1f1/0x1510 [ 314.104167] ? cap_mmap_addr+0x50/0x350 [ 314.108144] ? vm_brk+0x20/0x20 [ 314.111427] ? security_mmap_addr+0x73/0x90 [ 314.115752] ? get_unmapped_area+0x296/0x3b0 [ 314.120190] do_mmap+0x8e8/0x1080 [ 314.123656] vm_mmap_pgoff+0x197/0x200 [ 314.127559] ? vma_is_stack_for_current+0xc0/0xc0 [ 314.132430] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 314.136680] ksys_mmap_pgoff+0x2d1/0x660 [ 314.140753] ? find_mergeable_anon_vma+0x260/0x260 [ 314.145689] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 314.151058] ? trace_hardirqs_off_caller+0x6e/0x210 [ 314.156952] ? do_syscall_64+0x21/0x670 [ 314.160936] do_syscall_64+0xf9/0x670 [ 314.164747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.170175] audit: type=1800 audit(1603176099.680:159): pid=15239 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15784 res=0 [ 314.170900] RIP: 0033:0x45de59 [ 314.193778] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.212685] RSP: 002b:00007f8ba5da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 314.220406] RAX: ffffffffffffffda RBX: 0000000000021200 RCX: 000000000045de59 [ 314.227673] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020003000 06:41:39 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0xffffffffffffffff) [ 314.234964] RBP: 00007f8ba5da5ca0 R08: 0000000000000006 R09: 0000000000000000 [ 314.242241] R10: 0000000000001012 R11: 0000000000000246 R12: 0000000000000002 [ 314.249516] R13: 00007ffc3e45188f R14: 00007f8ba5da69c0 R15: 000000000118bf2c [ 314.384478] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 314.399780] EXT4-fs (sda1): re-mounted. Opts: journal_checksum,,errors=continue 06:41:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 06:41:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) 06:41:40 executing program 1: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) 06:41:40 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776d1825d982726469723d2e2f66696c653075cee319a4a4b435ed372979d159d3b83477f472c67f28d7ebc43a843a22f1e02ebd9ce68d8b355a509703b235db8c00000000000000000000000000004537a348b046711f2b8ef18e1b19eb8efa3e9249d9934c0bdb298cf6255455223177ffb9f88d4f7dc53766fb8779bef7d8f741b5edfb99707151ee05481f9ab08943d5120e9b209ed55fc9d6cfa35e93799e1abc77437fb33a70cfe59a4cfd9a4fad7ba96984074952f25b"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:40 executing program 3 (fault-call:6 fault-nth:3): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, &(0x7f0000000000)=""/236, 0xec, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 314.910237] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 314.964579] EXT4-fs (sda1): re-mounted. Opts: journal_checksum,,errors=continue [ 314.985834] audit: type=1804 audit(1603176100.620:160): pid=15298 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/280/bus" dev="sda1" ino=16014 res=1 [ 314.986286] FAULT_INJECTION: forcing a failure. 06:41:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001040)={0x1, 0x0, 0x0, 0x0, 0x2}, 0x40) 06:41:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000940)={0x0, @generic={0x0, "d30dd02e95be58344fd2ce66ab72"}, @can, @nl=@proc={0x10, 0x0, 0x0, 0x20}}) [ 314.986286] name failslab, interval 1, probability 0, space 0, times 0 06:41:40 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:40 executing program 1: getrlimit(0x5e00, 0x0) [ 315.174375] overlayfs: unrecognized mount option "wm%قrdir=./file0uÎ㤤´5í7)yŃYÓ¸4wôrĆ(×ëÄ:„:"ńŕ.˝œć‹5ZP—˛5ی" or missing value [ 315.210805] CPU: 1 PID: 15298 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 315.218927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.228303] Call Trace: [ 315.230900] dump_stack+0x22c/0x33e [ 315.234533] should_fail.cold+0xa/0x2f [ 315.238425] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 315.243538] ? lock_downgrade+0x750/0x750 [ 315.247789] ? lock_acquire+0x170/0x3f0 [ 315.251975] ? cache_alloc_refill+0xc5/0x410 [ 315.256419] __should_failslab+0x153/0x1b6 [ 315.260664] should_failslab+0x5/0xf [ 315.264391] kmem_cache_alloc+0x43/0x4a0 [ 315.268462] anon_vma_clone+0xe0/0x5e0 [ 315.272382] __split_vma+0x16f/0x550 [ 315.276104] do_munmap+0x369/0xe10 [ 315.279676] ? mark_held_locks+0xf0/0xf0 [ 315.284570] mmap_region+0x1f1/0x1510 [ 315.288388] ? cap_mmap_addr+0x50/0x350 [ 315.292940] ? vm_brk+0x20/0x20 [ 315.296312] ? security_mmap_addr+0x73/0x90 [ 315.301220] ? get_unmapped_area+0x296/0x3b0 [ 315.306095] do_mmap+0x8e8/0x1080 [ 315.309869] vm_mmap_pgoff+0x197/0x200 [ 315.313769] ? vma_is_stack_for_current+0xc0/0xc0 [ 315.318891] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 315.323273] ksys_mmap_pgoff+0x2d1/0x660 [ 315.327461] ? find_mergeable_anon_vma+0x260/0x260 [ 315.332830] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 315.338434] ? trace_hardirqs_off_caller+0x6e/0x210 [ 315.343573] ? do_syscall_64+0x21/0x670 [ 315.348095] do_syscall_64+0xf9/0x670 [ 315.351939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.357603] RIP: 0033:0x45de59 [ 315.360809] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.384048] RSP: 002b:00007f8ba5da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 315.392049] RAX: ffffffffffffffda RBX: 0000000000021200 RCX: 000000000045de59 [ 315.399417] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020003000 [ 315.406794] RBP: 00007f8ba5da5ca0 R08: 0000000000000006 R09: 0000000000000000 [ 315.414258] R10: 0000000000001012 R11: 0000000000000246 R12: 0000000000000003 [ 315.421547] R13: 00007ffc3e45188f R14: 00007f8ba5da69c0 R15: 000000000118bf2c 06:41:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) prctl$PR_GET_THP_DISABLE(0x2a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) close(r3) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f00000000c0)) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 06:41:41 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:41 executing program 1: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 06:41:41 executing program 3 (fault-call:6 fault-nth:4): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 315.591883] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 06:41:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x5}]}) [ 315.654382] EXT4-fs (sda1): re-mounted. Opts: journal_checksum,,errors=continue [ 315.701360] audit: type=1804 audit(1603176101.340:161): pid=15333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/281/bus" dev="sda1" ino=16074 res=1 [ 315.702648] FAULT_INJECTION: forcing a failure. [ 315.702648] name failslab, interval 1, probability 0, space 0, times 0 [ 315.913600] CPU: 1 PID: 15333 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 315.921512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.932017] Call Trace: [ 315.934642] dump_stack+0x22c/0x33e [ 315.938281] should_fail.cold+0xa/0x2f [ 315.943056] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 315.948356] __should_failslab+0x153/0x1b6 [ 315.952711] should_failslab+0x5/0xf [ 315.957488] kmem_cache_alloc+0x2b1/0x4a0 [ 315.963916] vm_area_alloc+0x1c/0x110 [ 315.968161] mmap_region+0x7e9/0x1510 [ 315.971970] ? cap_mmap_addr+0x50/0x350 [ 315.975950] ? vm_brk+0x20/0x20 [ 315.979522] ? security_mmap_addr+0x73/0x90 [ 315.984718] ? get_unmapped_area+0x296/0x3b0 [ 315.989145] do_mmap+0x8e8/0x1080 [ 315.992616] vm_mmap_pgoff+0x197/0x200 [ 315.997436] ? vma_is_stack_for_current+0xc0/0xc0 [ 316.002394] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 316.006912] ksys_mmap_pgoff+0x2d1/0x660 [ 316.011719] ? find_mergeable_anon_vma+0x260/0x260 [ 316.017248] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 316.022942] ? trace_hardirqs_off_caller+0x6e/0x210 [ 316.028952] ? do_syscall_64+0x21/0x670 [ 316.032970] do_syscall_64+0xf9/0x670 [ 316.037863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.043061] RIP: 0033:0x45de59 [ 316.046255] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 316.066232] RSP: 002b:00007f8ba5da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 316.073946] RAX: ffffffffffffffda RBX: 0000000000021200 RCX: 000000000045de59 [ 316.081221] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020003000 [ 316.088492] RBP: 00007f8ba5da5ca0 R08: 0000000000000006 R09: 0000000000000000 [ 316.095761] R10: 0000000000001012 R11: 0000000000000246 R12: 0000000000000004 [ 316.103031] R13: 00007ffc3e45188f R14: 00007f8ba5da69c0 R15: 000000000118bf2c [ 316.173744] overlayfs: unrecognized mount option "wm%قrdir=./file0uÎ㤤´5í7)yŃYÓ¸4wôrĆ(×ëÄ:„:"ńŕ.˝œć‹5ZP—˛5ی" or missing value 06:41:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65303e648eb2ed1a8cf10497f90b1006854f09e0"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:41 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:41 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') 06:41:41 executing program 1: bpf$PROG_LOAD(0x13, 0x0, 0x0) 06:41:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) prctl$PR_GET_THP_DISABLE(0x2a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) close(r3) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f00000000c0)) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 06:41:41 executing program 3 (fault-call:6 fault-nth:5): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:42 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) [ 316.424335] audit: type=1804 audit(1603176102.060:162): pid=15360 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/282/bus" dev="sda1" ino=16151 res=1 06:41:42 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 316.628359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.644465] overlayfs: failed to resolve './file0>dŽ˛íŒń—ů …O ŕ': -2 06:41:42 executing program 4: socketpair(0x26, 0x0, 0x0, &(0x7f0000000400)) 06:41:42 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) [ 316.789957] audit: type=1804 audit(1603176102.430:163): pid=15377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/283/bus" dev="sda1" ino=15776 res=1 06:41:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) prctl$PR_GET_THP_DISABLE(0x2a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) close(r3) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f00000000c0)) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) [ 316.869680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:42 executing program 4: waitid(0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 06:41:42 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2002, 0x0, 0x1012, r1, 0x0) 06:41:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000100010201040000000000000000030080020811044000000000080008d3a97c5428"], 0x24}, 0x1, 0x0, 0x0, 0x20000009}, 0x200000c0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x40) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002600)={0x0, 0x0}, &(0x7f0000002640)=0xc) syz_mount_image$jfs(&(0x7f00000003c0)='jfs\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x3, &(0x7f0000002580)=[{&(0x7f0000000480)="7ac100377dc4c0191fef42a0d2483a81f5151720b7c519959e6c777a1cf69964190b7f7b93f75fddd8dc914c1d828f13b84b9849aaab0497c802cb7d7af34907b23e69d254ab8bba189f24196b0d63c7d7cb1d44aaa40e6d8e74a3bbf74a24926d85d8cbb646400c22f4a1e17084deac5fdf6171755157aa8b690b7569c2d6b3c0e44f01ee9a4674091dba4b41e920e4e23e032c1eb8b955bfb3b71dfb59a58b1565981cad9d76b7aa8e1875d5e471511c90ea0563cbd596a4f525c98579184e00e45c0addf81c4bfb998008dc01cdaded258d8547996c6a5086a8fb77c1eeb49edbccd324863ab862caaac804f4da0067ae2194ed98f8837697a60e931e804a791079e6788d2707a44d3cd238e683bae09d157e4a7df77476348666547a47ae6cd3d2aae3559756225ed0515e6da8d7c9a8be6c9520e96475d2e8a252a3d299f423a7ba6062f65bb679abeb04b50b20ff20a78e4a34e5f912d5e924332d3433aed746b1c7792b8303b730d68cecd09cccb00d7b705fc4c1fd44e4cc6c655960ab1d0cc42f83656146e508bd57cf9e5894d2c29864ea65785c62d8fd3ed934c73ce739cde5c6d15f8185383bc265ef3f9fa697a53ac7df3c9bef1810c84ceaff1b8a37068182bbd49255ccaec7d2ec6dbbe92e529d1c1302dccd0a105508afada9db96c49d21fa9cdc36ddb9f0bb6634212b96dc2ec1453ad7980e4660c2c45f0f4486f6442fe7cb78c81d662f54cfe7e14c87767b4acac9afb5e887b2e93938d614f7a8a29533cd952ed535466ef784a5e02e8215f859ce874d4808b41a55a3beedc670cbcd99e6bbd6e95cb918159ac1e840c9807f4c0df081423b11486785e2005725530b4e04e85576bb6c6dae2949c6f7fe77e10ecaef7b324ccc2550eaa84b2ba172cf3d9d9d8e90014ffc7911ac4367b670341b2d64126283b0a1d75097fda41644efa57e18807c440aa1a10c93592be371f3345fd425402f86e6f75cc477724eec7bd302313cd18994a7f849df7cfbac58d92c473e9dcb36709e85ad510aeb1cede4901c1f97194bfa76ed92ecac07b57d5677b9509353d91396477b9aba484479a479f0c8ef0ee32bd213e1f0fa49eac119c58cc09d91a2e047a3d0cc3e57646f9896c56330bec5897f96265e63993e410eff83543d294df73523955f72b452084fb1bb9932164dfd8e1bbd52df81b308c351107d61e57c7a3a638eab3bcfb957a886f15a2c547a2195024823f77ea2a24a80c5386fbbcb35b31c1bfd1b71da530e373128bfcd90b974fd1a9266b7c1c25b34b2708630e2a522966d3453fec719668fd2a70ffe6638bcc2d6703f8bef4b29e8b75302a4af713ed54fe3d90bf35c9c77381604fbcc1c5683c30dd2f3e2aeb13dd14715083eefed08a467eb412b30bd3a732c465a23050ef6197f14a34f07535ded7ff89457252f3d2a792579ed7c4eb6f83e88ce153e02d5e6223260820b59e114e0e1ffd63015d22f6b2701cb6c7cee58e28c4b5875ccb45ebafb91f580829a73936e4113ce382d4002f52737603cabdbb932f71a085d6a45c1f64ee3144e8a8854a778770fc2ee2a01d8d5c5e2f08fc9d89bc814d14a2245db32b24a03217136a643b407645bced95d1aa02038d51815f30ea4013a2d38c2fb2b9d86d3addcbe7e71c881ab0f18bb0758d7828e5b41f08959e2eafbbabc5756751d7f4666748053e94b0fae9f41a4d7c864defb992dd00ccabd111d20681f16dad782d46b6667b34851c7f26c402c0f387465b2ec4fdb5fd717583a69ffb4e7cea2b25f4ceb9f868ec90bc4dd5f8e17242be73eacd1766efc3d9ef9c63bd084a509eae0b0ad8b1d7fb854fc365f9a5e95804dfedf5c1350b16a947e285fb1ac67d459a499c42df5aec3bcf6fa790669a5177fd9119fba0aacba3b89bcca19ec0aaaa48ed7f5fb6f0d0b0ab04fd80400093ac8888d3f5378628aa34922a3de254bc297dfa87d4f67693da85c741aef83339621e29ae6d56764083d86fa822c3cf758e22f37596c521c5b9b365dc39734b07da6d5846976f195bec510c6cc6a9b880ce046df6cbf526ed65d255e496793252e7427cd57ceada8636da4b1e8659c556b06297b5e663fc895f2c4393b653b87b52b900c9c8f2680d90a3cf087d393c6f936c0e79ebf6190babc7ad1d73308e696bb19ef1e92af84f502c786b4d0cda31376102664257813acaeddce161eaa8f99668758e8c490184bd4ab80f96d6d51782fff3bb0a32959f0598286cdc69ded920517df0df07450d1c8cbed14f91a0cf41fd236fe1eb29e03df6bc7e6443f66f726f345cf33843d23490d8636fb36618c462169a11f347839bab81c520e0626162f14ce005fdcb3c1b27511d3d4ea152817a37d0d7943a878d676b43a8521642eb91eda13129f4a3764f8a1a3848e829391f55f0dbd1d6a0ccd88fff1cd42704eeed1d5a8445a1a82a7a748a32599457032959904fd1262afc7c8728a457f3c76a3dc42905275e4c9cf1ffdfc3790d80e88d96dcb1b00ef02841955ab8f2c6a49889202d72718447ab57736282da92565dd218d6f727bfa93a4a2092b8b9931820e103ef771ef3524c9cf46ee2df982116ed1eebf9c0de1e03e41ecac08a5e1b62b1b4e17107b40b12ac2813bb4953fa0f251027f937e3e5b95a62a7b2c1d45f332cca4ad6d1bef3dfda6a6976ae94851d8d7a0d0edb23d921f7f6d209491b7af8b267d7df1d19f0cb7e317cdfe75da80bbc8d8fbf60da06fb8adef173c790294022843371726fee4019240ce278fcc09bd9013d58220aa55e7b4d1a5a38ec84a1b1e34b3851fa70e56f02bdd161905072d974e250fad98c2de1cc2372758306653cc7c6e6b611aa036c24b9ec73dd81ea5da35aee36fd07f002de39530e70e7fe30c42e3bcb0bfb5124be5bf4618384b9067fec22995efa1a014c09ebb53d7998caa785c1d1adf6838558a6ec7e00438ab8a6ea437398528e9030aab29b5aeaea27a6e7de61ce6eb1d2ec9bf3fcf9f187712b90d78a035fd2cfc9ab5439a2bfab9e16f952e177440221c5afb49cf31bc045930ca2580c79e1acbbdc542f983afd830c0656006fe113d9f79da8de609e6aec7d621a64ac1f98f3eb0de6aeb08e0989bd5c86f46df693aa6c2e832496e2167392762e9b52add4fc879850d8d86f2fc0260475abf43f3636deacddc051b0f6c85bf53e7fe5862c7734239e43d30341bfc97ae02c26f4b38eff097213c81470ad0d9f6b214d9f116ebfdd0c02b6b913d7fee484d2da63478a1d06823b27ba0754319ff0126bd8c3d113cb302b766261c6610421c44189748e8b7e53701c4092e25af756e7fcaa730aae0d0ee0457a815ed1ac1191b025448e6ff423c02c336870f45897ed51f6b0572da58ebaa1927aa7aeae126bc1aeb746224c75e68ff081b4751e11129ab18e22b48e5947b5140cc4250a1ba5aa5906d61b9eabfc40af181c7ef5c7241e73d53294c82806e9d3501fcdee69ce7fcecbc107a6573a98cfa319b1a6847aea2750f6522ef06783da0ed0ce6957dd9f32784f560e36e56de5fca9dd34ef997526273d18e7f5e94b4a735ea03b124870b1046df4040afbfbeebfdf3f78dbca23227f927072c1023d184704d08f01cb0f8db8457b924608c34292250557068f8838de9494774f6ecfd97bea9f69f1fa835147c69ef53cd08bf94bd6b8c1ff0b506f6b40b1fdf3e676718d5ab931bd7891f00697c49a70dc723fc834a9cfe30ea9a03812b7b302a4b81a743c9f302393d8b31b6eb32217023f6aa8fa93c1477155dbb003500e01b35028bb393a36efcf091e36e6d9a0fc698b4fdca3be787da3f828e94780de29f6e72ac6cef45d579592d056c1de98b5220871448bb0a5687d2e428e856c6bdff9fa445dca1304980bbeec49169616bbe373441fa1ed70b1544780ef241bba2ddf206b78f8b023354f8a98f02edac1c65687b626e0b0ba9fbe6809a4ff7bdab2cb79f5687d2bc67d49b0b6ccdbc0f39757f4539bd98aff2a6468e47a4fedcc7b2e67f302b8397b030abece6fbd316247912fb691d7efdde9e780bfc87bfa3d391fd3dda9055198ee25f003fe5a4a2401cc0af71e9afa1462fb17b35ec674d0ad27959607c7193ea2bd61f12a552939fe3a5ebf6ea5dc8f429f7cac943f39f34d9d74a13109fec59588faca6a3b71b38e2df3f31b1620911eec698c28e4e3d88131d41c9ebe5fc01a3dd94cb7593ba49e463a5f9bcb178c3ab99c433774775d4366b48318f329d3013a2be598a0d1e2426ffa7bf8c2e8241722bd4d1f0d94ff5e7107800844ac09266bbd5e66fac2c7a66e7e4877e7fe874753b35fdb94e6f2c8b029d7c5f4df2a790f7d23dabc95c3155b8b1d0f1a13b041576101ad2f0ab16b2b21f3346a42d2ccb9a6d123d04e14b1e91464acdfed19147820e5fb78a5375b82eb93053202f2265a98852dbc80052924fe83ace88e3d5311486fa66edd0b364ee441fbff1a0bef7288d008ca68cad9607a27bb0d2e1fbe2af64085cedc78a8be03daaa0e1fde89d5e0c473232476c3c986b087e9dbfdc0e5f8661b2c2975aa049f715dc457de09b0dc7023ed8f64b4f361ac41488e32ceb3de116f6f1c4e595660ae8c2b0b3b20136ca7b1eaa68e6f82c16d7dbcb461446715dbe8f8bee395a288b5b53309c7f32030f423e8ae9158e9b0e423c6bd29ad2e94a695f7c8fcce8d9945076c45562cda340a21aa2dac14d1217e63869a37a797520ba9371875cd0f9fe8e7122ebbbbf043ba284335b6a4de6f419511daf437144a86054f9a7be3d2549d5d5d0322589f012114c63a6b8dd3390273c5fc92b08e644d84998742c0a32a56f0d8bf0b8713d8154b675264632a92702b76ee34705856f31fe696e3e941637ceff478212a7cf9560dc7311409c864a5a289dc09b60a95a9306d506d8697973fc5e972ba13b0f9e6c055403b31b4fbae1c57e8bad921643b3698ce2c9c5a9979735a7720e030a5086698990a78a805df5468ba5dda9cbff0e6fbdde41bd433f2677c7249ea4f3180075aac4d0199a5a3cbd5c428b45cac59d917c13fd33cf65f927386d757866b4bffd19c6742f8dd25101ee8700fb92d6b8e98f76112d9543a618d59ab71c37cfabc7b196ae5c78b98bbcf4635de794d52b7bd329437bc6e7786411af16fe462a170d80730da621acc854bd45a861bfedcb60bc9031bb7bb0f0742f065a23da23efa2a5cac9e5bc029711488f062e81585444618bd8f952dc6ea7e59bafe17298ad36dfb48cd0da6005cdd0d9ca95b62e4dea2fe8ca6f55b69e7a58c02645e9fb355c0628992752b44285416d5db5c2090459d50867a1606f7ad2653c82d51f16d059f53979d06825476a17a355be6813ad7330131b87c82afed64373433bb5133240b6291bda294cbec336a332fd2a54cac30d05641911af36813b3ddd980ccc047688c763344e9379810a6558b3597daab1c1fe5bdb39769501b5a18937c50df46251766f3e436d1e715feae02879f55e36b5ebf1d7e7d30dbb59739661f6d613b565e9b7de890923e437ac82ff48b089949d4d5ce63b71228caa1f124ca261086d3a7ddd43d261e95a18a980d04395b76129019ac3e34a74b9fc044f0a6a23dc87a0cbd9bfed6c2e8c57280cf389d3eda6dd9ef1b119b035d500f662baa7c77bb190e7c6fe007df3fd4484c80d89c144ced03332cbcdc2c1cd75fade9a3717c07a7f1c3a11c86227e8b5ac410845511539c733ce900836248fed294b2453c8ef208571b0a2d222539b97dfd4ec96491908478f9395", 0x1000, 0x8}, {&(0x7f0000001480)="429b97591fc6c020b4d4f274b40de9d0f4dcc0359159518d0ccbe6c921f419686304e0e634416889dc382ebc21a7934b5537d37db2419333b27e6ae4e596fe8ed4417a6b09fb86048b31239169fde4b9612794678fc8621d864483315c51ad24e8b308aea35a127ce9b98c731114aa1aa5225b4a97e44cab7387797abef4d0c5b89fee5c68f8d85e137d6f06691d5aece3df959fb0b0e347a0a666d0403c6d26531da1e16e1aea45135ee105f31aa95822a872273741c2a342aef0f122049ea8a3307864ea999a18eece64d30a5c7b2860f38b5b210658158ced37090c84", 0xde, 0x7}, {&(0x7f0000001580)="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", 0x1000, 0xffffffffffffffff}], 0x200000, &(0x7f0000002680)={[{@errors_continue='errors=continue'}, {@resize_size={'resize', 0x3d, 0x1}}, {@nointegrity='nointegrity'}, {@nodiscard='nodiscard'}, {@quota='quota'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute'}}, {@euid_lt={'euid<', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/vcsu\x00'}}, {@uid_gt={'uid>', r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-^}-}\v\\}\x84'}}]}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000380)=0x4) umount2(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 06:41:42 executing program 5: mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 317.076285] audit: type=1804 audit(1603176102.710:164): pid=15404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/284/bus" dev="sda1" ino=15784 res=1 06:41:42 executing program 4: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe27a5fe000000cc) 06:41:42 executing program 5: mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) [ 317.176191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.187235] jfs: Unrecognized mount option "mask=MAY_EXEC" or missing value 06:41:42 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2004, 0x0, 0x1012, r1, 0x0) [ 317.230428] audit: type=1804 audit(1603176102.740:165): pid=15404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/284/bus" dev="sda1" ino=15784 res=1 06:41:42 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x2, 0xffffffffffffffff, 0x0, 0xee00}}) 06:41:43 executing program 5: mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:43 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x200a, 0x0, 0x1012, r1, 0x0) [ 317.461185] audit: type=1804 audit(1603176102.760:166): pid=15411 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/284/bus" dev="sda1" ino=15784 res=1 06:41:43 executing program 0: shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/202) 06:41:43 executing program 4: symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') 06:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x4, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='/dev/autofs\x00') ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x7, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) statx(r2, &(0x7f0000000100)='./bus\x00', 0x1000, 0x238, &(0x7f00000002c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:43 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) [ 317.613245] audit: type=1804 audit(1603176102.760:167): pid=15404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/284/bus" dev="sda1" ino=15784 res=1 [ 317.659629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:43 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x7fffdfffc000, 0x0, 0x1012, r1, 0x0) 06:41:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="8d"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:41:43 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x62e80, 0x0) [ 317.777596] audit: type=1804 audit(1603176103.020:168): pid=15426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/285/bus" dev="sda1" ino=15787 res=1 06:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:43 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1101000000000000000001130000000022001701", 0xa0, 0x8800}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a0802", 0x1a, 0x8b800}], 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f00000000c0)) 06:41:43 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:43 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x1012, r1, 0x0) [ 317.974466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.011629] audit: type=1804 audit(1603176103.020:169): pid=15426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/285/bus" dev="sda1" ino=15787 res=1 06:41:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd) 06:41:43 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:43 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80010040, 0x0) 06:41:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x2) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 318.175943] audit: type=1804 audit(1603176103.030:170): pid=15438 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/285/bus" dev="sda1" ino=15787 res=1 06:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:43 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x1012, r1, 0x0) 06:41:43 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 06:41:43 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) [ 318.317900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.342919] audit: type=1804 audit(1603176103.030:171): pid=15426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/285/bus" dev="sda1" ino=15787 res=1 06:41:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:41:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4, 0x1012, r1, 0x0) 06:41:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) 06:41:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:44 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) 06:41:44 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:xconsole_device_t:s0\x00', 0x27, 0x1) umount2(&(0x7f0000000280)='./bus\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x0, 0xa8a, 0x1009, 0x4, 0x2, 0x3, 0x1, 0x4}}) 06:41:44 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock2(&(0x7f0000690000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x7fffffff) [ 318.673963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:44 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x3, 0x0, 0x0) 06:41:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x8, 0x1012, r1, 0x0) 06:41:44 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 06:41:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:44 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', 0x0, 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xa, 0x1012, r1, 0x0) 06:41:44 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) open(0x0, 0xc4042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000480)={r4, 0x4, 0x101}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000005c0)={0x0, 0x0, 0x1, [0x401, 0x5, 0x0, 0x0, 0x43a2b12f], [0x1, 0xffffffff00000000, 0x4, 0xf175, 0x1, 0x5, 0x7be4, 0x0, 0xfffffffffffffb1c, 0x9, 0x0, 0xabba, 0x0, 0x7fffffff, 0x7ff, 0x2eb, 0x0, 0x8, 0x0, 0x1000, 0xd029, 0xfff, 0x8d89, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x7ff, 0x0, 0x0, 0x0, 0x1bd, 0x0, 0xc4cd, 0x5, 0x0, 0x6, 0x1, 0x850, 0x101, 0x21e9, 0x4cb, 0x0, 0x0, 0x4, 0x3, 0x401, 0x7fffffff, 0x20, 0xffffffff, 0x1000, 0x2, 0x5, 0x4, 0x0, 0x100000001, 0xfffffffeffffffff, 0xffffffffffffff06, 0xe9, 0x6, 0x7de, 0x6c, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1f, 0x3f, 0x0, 0x6, 0xffffffff00000000, 0x0, 0x3f67, 0x0, 0x0, 0x0, 0x0, 0xdc8, 0x1f4, 0x3, 0x4, 0x1, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0x6, 0x5, 0x0, 0x20, 0x1f, 0x7, 0x3, 0x101, 0x7, 0x1, 0x33, 0x6, 0x0, 0x8, 0xf0f, 0x3dc, 0x0, 0x5, 0x1800000000, 0x1800000000000, 0x1, 0x3, 0x101, 0x400, 0x9d, 0xffffffff, 0x2, 0x0, 0x91]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x4) read(r2, 0x0, 0x6c00) dup3(r2, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000180)=[{}], 0x1) 06:41:44 executing program 0: r0 = shmget$private(0x0, 0x13000, 0x100, &(0x7f0000fed000/0x13000)=nil) shmat(r0, &(0x7f0000ff3000/0x2000)=nil, 0x3000) [ 318.985680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:44 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x20080, 0x0) 06:41:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:45 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x10, 0x1012, r1, 0x0) 06:41:45 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', 0x0, 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/242, 0x1a, 0xf2, 0x1}, 0x20) 06:41:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2021, 0x0) [ 319.474905] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 319.549170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:45 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', 0x0, 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:45 executing program 4: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/172) 06:41:45 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xa00, 0x1012, r1, 0x0) 06:41:45 executing program 0: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe27a5fe000000c8) 06:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:45 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) [ 319.899245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:45 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x0, 0x0) 06:41:45 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) 06:41:45 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1fff, 0x1012, r1, 0x0) 06:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:45 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:45 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) 06:41:45 executing program 0: getrusage(0x1, &(0x7f0000000140)) 06:41:45 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:45 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x4020940d, 0x0) 06:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:45 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x1012, r1, 0x0) 06:41:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340), 0x4) 06:41:46 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000080)={0x2, 0x2e}, &(0x7f00000000c0)) 06:41:46 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:46 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3f00, 0x1012, r1, 0x0) 06:41:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0xb009, 0x3, &(0x7f00000002c0)=[{}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f0000000340)={[0x4e]}, 0x8}) getpriority(0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r2, &(0x7f0000000100)) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c876a7765726469723d2e2f66696c653025993848da6ca7c3fa8050027038afde019f9e29e870cb610b0ef43069f74c369186f2cc30ed09f2817d70b5ae877beadee8d9676086ffb97ab323038f34e882a3590e73f401b4a2b449adc46bfdd0624c912e3a1fe36c5541a04320170050813dec9194bd12dd43244769ce139656750d96e5976d7004bc3681b2baff2032d058ca8701cc602faa75971d"]) statx(r1, &(0x7f00000003c0)='./file1\x00', 0x400, 0x10, &(0x7f0000000440)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 06:41:46 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:46 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x14, 0x0, 0x0) 06:41:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:46 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4000, 0x1012, r1, 0x0) 06:41:46 executing program 4: bpf$PROG_LOAD(0x11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 06:41:46 executing program 0: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ff5000/0xb000)=nil) 06:41:46 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:46 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @window={0x3, 0x3}, @sack={0x5, 0x2}, @mptcp=@generic={0x8, 0xd, "7dbbb33612c439e0c1284c"}]}}}}}}}}, 0x0) 06:41:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) syz_mount_image$romfs(&(0x7f00000000c0)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x7, &(0x7f0000002500)=[{&(0x7f0000000180)="f4ab25c2c01bb3213b429deb776f8329990e8bbbf98003a37978cac9e09c53d6bdeb151e2b913e8c5195b77d2eaef2f216128c89e709ae", 0x37, 0x8}, {&(0x7f00000002c0)="d4d0159a2f4baed6e8bde88675bafedcba1780845179e99c6b886fb874583a0918ccff6be595913cfef383273ce714b0a9d8a64bee7a103df40cdc625e3edbce2041346f7de928b1c8f5234f43406642e888b55fdb61dfd0edecf4146ad77c64b7e6cb47097af88d593d24ddc0eb47a23674be757172a4ad32e76dcdb68ad9830512920eb95458e718dad2d6bc26e6fc746c6d84ea637177297ff0d1d29894a33e119536cca511996259fb7e4e2b415e623bc2acdebc55cbbcd8ba776672e98dab0640c5b2a9926d4dd59d10e248e1ba0e4c6280bd9919124e5558a17a38339c1a11575dd7a7b7e4389c84180698e30765a51363789d", 0xf6, 0x27}, {&(0x7f0000000440)="d53bb8b6a2d52dc3099494604a892f57ddf73c16c2f3f3b8d12a9d73c98b51a7556edeb3d4574c6b719701b997ac6b43c0525b06d0f1a26030697f406283e19ff636bd8472a70d2483da565a09ab65a4fb6ce9891f27310e7cd46e6693b949ae648f64ee017d01fb1819c7599bd76458cc67271e7b260b1996b70b2f49de6f8da969e6208014db0413101a6224b526553a8e1307c277b0a08e799ecc9e07aa2fd97ef1dc223371df5b551258583159974d1df13598c6018d933cbb686e724fdfe412ace88718dc8db7184d07f4974adf3fcf4b4a61dcb3fa13ab3a6631cdf42525de55b6319353ef8f20e53bf00fea3df0d39cc3115df8d9873d032386e566c78e7dfcc20a88c5ca5be0cad9257987ac1441cff8d56ddac44869e7ab65c6ffc2bf15ebe73b85b40f6cf266e011b402c02b7e08ed3e9051cd6e15117984608d08979610461bee1d349fbdbb15f7e0b29091e84cd010fb8e16d38738e990f54b5c79cc8284b86ad608f63abcf5dc4eb726687b10e9407b679d66a08880cdf4116d709867930311b747188a3a326c30f22037820f320efa2418f91fed7dc06391f5767cc28384aba06269849cee10df6dec18613350b8841341cc484a26c32fadbd4f33e9393f13bf8ee7d061992859baf21558d0225afabd89bf9e851abe7f70cde451615a03b5359a12ee7e102357b3f199924cdaa09505ca190e10b60d88a38e7b0268d290b66e913be1388172b127c52ac93fa8a1c7dd9086349b413f986315571a8295aa7fff48121d07f78dada8b9d00c786ca5d59ec75dc14b085b4ae89fdb3cd566c4e54735050b9a297f1c44956d3ca973beb9b0ed2ae44446f145a788cc499fefa63dbe97ab67e78372bf4c2953b5e24578ac23a83394ad86802ef60c94472ee4408de6d935675a1f2d3938d1c0cb9f3785a671e8b198ca9db64ecfe956f40681d91b1ea8f34f7af72926088c626005e2abb6b91c36d8eb30a8598ed17b7d5035ceb9802b5a94a2e6fe27877a257651655f4a2d5645f300aa7798e7645cfc79503735fed19ada01aad0e5d5ab5bf85924d2b456c414b1ba1d18cd878c6f8b6f6f0e117560202c6768e86620f0ab6c370199914401cef74aa7f4c2910bd7d7b2c6c17d5495a9d43c90d88977a2e5a365e4725e7913f44c8439c582d3cd9826c2a900f8c52de743fc3c174687d87377ffe7c3bcbfcf73082f210fe6e3d21269feb4fc83840ccef4be6abf78f1bcc99c42755d8102070193124d4a72810b3e3f9d1eca2dbb8f9b9a74be3b83ee218b9d346d75915a55ef46e1df80ba41cf67d112bb25a2da11a56cadc27d69df61d1a3c5177d6732f12f2b390aec75828158e4e5be4d82bfaf56f2cdc87e607ff74d8c6691b03557e7cce3146fdb0f95f8138c0a5576179245e080266ddb6ab91fe66c2e884a5c4ef8f08758c20e61da4b281e7cddcf7216bf49b0a0cbfc85b99feea3db27f4215341a96b522a9896246f2495a6771458202bd22f907301afb4a764a8f90cc07e0613342feffb0f49565bf447fd689aa8f88c01725da79178746d60e500623f05c3de3cf8f90ac4bad402dadb4a909d314efab0ac8aa1d336ab0e9b5112a07bd9140b416936fd02228e49d64c31ecf45cc91524098ba0faf22c5117b6ab42f369f41851e6a2cf082323ca5e6103f953bcc76060897060fbc44fae0b1145d074d69005f6eab39e0825f1abab70926b553bffde5817aeacc9389ed6373b2a5e6a702af24304784df6756d143f7c70a61e970f8c4f270241a913e155c3b2c38ffbe8ff43deab1dddbbab530f13edee07a4690441476a7e81e816ed3cac2d012894898f4d9735e148248b56351d3ed8aae1754daed64b5250511f104ae675fa05c142ae651fd2da070ce91311a3ddf83042bf4fa0ee36d9bfe0e4f5b2544d6bcf1df06c0d3dbc8f75751805e4f8cf550f74b466e30aa360e171e5ab806f12dde321e1321cf1fa537f63644283e54d18d31dcf6fbddf7efa0e877ac573ec3c30a34b6e70be61a9425022cdc0c577d960ac3bb897dc5c4e22b91590fc96415e48c6b6128b3b698fab7f46df9661180ac64154f8e25ef9b4557317fae1bb47ede5f0ec574201716a64f81f4b44dd15d559f58b2500c58cb8c3b3d1e596f8b173e9e63879ecfed3300683fcebe24926d56ee931d6f9a5af8b6e9a469a0c24b3d8046b6fd65a346d81756af76b98462191ec4eaa5339e63f65fd60a9a482a3c183cf89e0385c1992ebbb2d60e71723d6f0ca701d53888fe5453fb572c508f97dd166438c90b7402846f8e821bb301dd1d02b3b4233b0b6bedd878cfa2fb8f387d4f74930c8f60f4f5dcef9779654cf151589f23c420d044b816e552e180ca62bdf5ad95224e2a3edce790958ded6b9bbe9a5ca4b43fa7131bf51d3c9963b20ab783c9fb2fe97d3d45559e774e993d7728ceee5f7040d3ce7f4317eb5f2ed32b32aaa411b690423c830b25896a643b80779dada4cb66c670afd0a5feb4b9c5b93c1184c5e7f3e52ac2e87ccd7f4aff459b46d3da200d94d87439001474b99ed5b6ba6e2c0c1dbef8f632a76c03745b795464459a76fb5b24c1c2d3ea39642cf814bef56bfd4467deab8b3f4d516b8c11f322aed20efc5ab41942d6440423cdbd69a7fc6581d97663b0322fb60c5d51be66cd90aac91d2ffaba7c8e1fe0ef8dc4bd2f8bfc4d18048eb9f26ac185164d5315f7ed8be7e76cc5aa1ae1f1888e03b44101b4b34eba82cd726897a3e4129af84240f9c99a1c5d1d9c78e5aee4d912a0626b9c2bbb851372dc135c6ebce7b33f00087b15318e2a1773537cacc1f6a02e94f6f10c72921fe373b7395e3f775d37fcbfdc8108a27e3a2c23e3ad25b1a30f4381c2548bc74ce114c4e2d2dac111435f36e5305f55b9aa0cfe79d5cd38af152a17a24502e3b43dd33c2d7e0deadb1f821adfbdba220d5a4e5d64270a1f28da57a3630b1ea70271db0154c89e77358a5da417a7cc09ad235ad6c84d96b0f6a35091863670ded99db47182950238b63b14484b19c52c246f2a99e68966dea88f4ebd748e107c53f802011bf4d9755196d3720a313fdb7c0ade9ffcf509af4265801e85e111b9708b816cf0e0730abb72b0f80389ebc7b8e7217dbfb3f463ba781ea689c2d51e1ed17d1afaf151e6a62fb3162fbf56b6e0f15b54e2ff5a4c10208e74ab879492732ff452eaf6121ee7f187342ac52d52e6d80a590a2adef9ea1b2daa54fecf32d14b21bcc9718a814d51a99026869422ea58e622017c468cdbc8d729320529cc930f0f9b65b87efabfc7d408772285d6b23370fb178c9ce1060dca362c864dfc6e905563d6ce9b45afa067f5583e61e527b242810009826430719bd279ffaba124600bd7943788960691ea346bb63415a75dc6c496075e911e7cf57274473784252aa1d205ea0dc257fce38457fb796ba115bae5fb5558f66d6655d8ee0785a7aa27861ddd5e6095c145983ef094ed7c6d89de57b1050440b8251abd6d9563522b69194123cc1146222145bf4142dff508d95dfb3aebe0dfbb634f4f126cd76b45aae3c6166815a79f36287c00836f01682d3ad654637415c338f34be7697fa0205930a1fcfe3d79f22c5c1773ef1b2c407db4075bae4aad21afcd35bbd21ba795c67c3280ce53f9cbdbc1523e638343e406527c4837af1f2954ced514f9b4a5ba25eaba494703fa1902cda6b73528cc368ac44900fc703e44e3223a49d3f5bed63c872563daca93b79fb88102d955655b215e85ad617037ab20a99c796ea9f8438a89f44293e229b09087d5203e7934de637805f91009269cafa0569f66928bdd8c270fbe99cc9e70bb1a6d80aa0122cb050e5e5b740f573921d71e656163b70a220b60fcb33dca8bcc6d65c732c187c15602ffda8aaab9d570deba4d51cf23fd1ada69f0045132769ed5597052485376243ae0cb2017681d2f44be5d124cef9ce99a3bb6c77e3f88742106d5d331288741c6e055e151e7f210c2d5ea490d39fdbd98bef8bd94f0cce4c5ecf512990c98f11b5f31db0a741a5a506cd9d3060663d8693d725a469710a088e99a324c9b7dc47ef4d51840ee0546ad229586680a0758478dba9b8dcd9fee8348c0edf6e017bc5e88a1aa67966c9eb8ea862c95e8645accc44e1c5c200f8f3920bf0f355c3bc475a180df84f8378ac6b45b7e3ae7c533c74ed48455a8c704a4f885015bba3e200d2719410e0d001c9d945d2c5b3592d6dc9285e41a15e9235642d499770b14d0f691684b544c37714ed1acfeb6e6a2632808d9d85cf2b6c90536a5c6cd6049a800d5cf58face98cc67b360f5f9f27b0c32183f2bb5d8ada55e35434a8eaa797b414b40cb082654a3319eac39356c91a092eabc7737741937c00428ba4e06034bb8c39ad99d40541c23d859cc8ddea78cb731b7478299aa42c650f048d47e33aeaebda0f67019c013fc704309e26cf4ae666be31292331a516e1111b0a2b877cb5fa33c0538bf7d5d244f2adc859ca683eedf47059433723de0f75e197089eec6d714fbfd2b7584ce545e1a73a4ff72267ebee894d99dfb05218de9843a6172997cd84b44c29a9be93efedc8ac021e6b5556101d3d4c59cb89d906da291a656e15c79f4061bb54692bfcfa17e91ca95aed539354a7514eccf567f002633954a2a791118d30ee9a2571f949d4842aafc60b7bf6f9be76b89b339e86d6218b4f7795a8d9c4e82eefa84c3b396a70198dc84dc3e0e7e8583f2c208f8c16db106b294906d7557211cf4e7f20d65e7ee3b20edb5a8c7ec1c03ef3965942aa21ff402e26d7251ceaf9fc8eef113633d387167ddea65851f26089df11ac253843279aebb9ecc5d44fa8443dd37486a1eea9066007a5850d1060594334a1961c3e92e9dc1d320ba4179be8dc29acaca642fe4525804496f42844c261da7ee90571f22b3e11b43d72972dee4a827c704518e41c9ba273763c91252891f31ffdcd36ad7de354df71b797a415445a323ccf39b060123b59a9650261b348fc37ecee6dacd8f0b405618ba42bc9fb383a1ed4b0e08c911694da57e8bd5fe575f94a5f8f280caf997c0f06d98e77817479714b8a7ab8bd41bd061a6546c0250c7985d1db21679c316348952cacd0531a3b5e778446379daad7a45d259d7d5fa2ea7d4235827e321b38501b2aab4d046fcd69a24949af0350aacae07975d351724345df1e7a1eca9192b209d458aabcf8fc6fb88e0c41a31a65b3384b913bc13e15ff2a814fdec2ec40531fe216a21b81b93d5efa290ab44f39a683ceb140144139b039ed263830105a53fef6c5450128dfaf872b403c12a5d0e56696c9d3042c93977a709f61d196d534cac788fbfad6e6cdc6260016bcd14850cbfacec7f353cf13d4d7d89ccd838a197c1d5bae998ddddf273e64ce3fdba38eae2583db1b1317d2627ac809245e9b492781917cf2d462c2f661ae936206a99a4d53325a015b7a549b66f0e9ce84e1fd68d6b9b0ec2107916eed847c54efc4b8f0e67b78c6ba0b3dc1b0d9e9de2fbc65d54bc0c3ef59ebbe016ce4498aae12310e92e24680a3f5a48b2e99c144ab296eb20f691d1f8dacadb5f9ab426c8e717a9b621385cb4b84124bc8f9368baaf2ba26491ae0bae214747e0e345dba1d79bf14e0200a3875c3635f5d3a58318c7555917dca402f26786d83c003a317d669ac465e7fa456ae4e18f2afc62cf6fe6aa4350eda06a678b3348624770068771ce3452b20cb2f9c6c020c5810dd34eedded6767e2abf19fff7555d21dfd1c121a7f41c0dfbc89", 0x1000}, {&(0x7f0000001440)="e0f4191526db13ce5d97835ceb479663ab98d4d7da4ca9226f12d22ff8a3df92e842776032f26877b433984a8d4cc60224272d4600ca8a01ac240ef5fe1bc5753059504f5c1bb076b000d9dfeda13d6a00730a134d92aba539e9a34b4e297994e207be190a9d0a64baf915402e06e6560302b244d4f9d08e2a99127d89d7604874d0d707a64733669f06aafc97910097e0624f4fe0c4c77a82a45f57aa008d6679f26d", 0xa3, 0xfffffffffffffffd}, {&(0x7f0000001500)="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", 0x1000, 0xa40}, {&(0x7f0000000200)="9b87776e9f713f53409edee0552d10fcd4ca008ad2d6ba6cc5e14929545252a5a0acff70ac9fc66d08681c15b6aef923dd", 0x31, 0x6feb}, {&(0x7f00000025c0)="4939e60c8be6ec48d9362742ffd96aa5141b941212976a013b8ec3cb8b16a46f9a48c34a39e95cd37857720893d11eb6ce19ea105f881eb8056f722445e5be", 0x3f, 0x2}], 0x20, &(0x7f00000001c0)={[{'([$('}], [{@smackfsdef={'smackfsdef', 0x3d, '%\''}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', 0x0, 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:49 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xff1f, 0x1012, r1, 0x0) 06:41:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:41:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 323.808665] nla_parse: 2 callbacks suppressed [ 323.808675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.838613] kauditd_printk_skb: 53 callbacks suppressed 06:41:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', 0x0, 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) prctl$PR_GET_THP_DISABLE(0x2a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TIOCGRS485(r3, 0x542e, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) [ 323.838627] audit: type=1804 audit(1603176109.470:225): pid=15791 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/299/bus" dev="sda1" ino=16273 res=1 06:41:49 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x80000, 0x1012, r1, 0x0) [ 323.948206] *** Guest State *** [ 323.978093] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 324.005509] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 324.011693] audit: type=1804 audit(1603176109.480:226): pid=15791 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/299/bus" dev="sda1" ino=16273 res=1 [ 324.023851] CR3 = 0x0000000000000000 [ 324.053832] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 324.063830] RFLAGS=0x00000002 DR7 = 0x0000000000000400 06:41:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', 0x0, 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) [ 324.076099] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 06:41:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 324.153988] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 324.204278] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 324.266850] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 06:41:49 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x100000, 0x1012, r1, 0x0) [ 324.308617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.333506] audit: type=1804 audit(1603176109.510:227): pid=15791 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/299/bus" dev="sda1" ino=16273 res=1 [ 324.380532] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 324.498656] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 324.529109] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 324.549403] audit: type=1804 audit(1603176109.520:228): pid=15804 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/299/bus" dev="sda1" ino=16273 res=1 [ 324.590374] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 324.619392] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 324.658402] audit: type=1804 audit(1603176109.520:229): pid=15791 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/299/bus" dev="sda1" ino=16273 res=1 [ 324.665914] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 324.709810] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 324.721957] audit: type=1804 audit(1603176109.520:230): pid=15804 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/299/bus" dev="sda1" ino=16273 res=1 [ 324.752254] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 324.759793] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 324.767454] Interruptibility = 00000000 ActivityState = 00000000 [ 324.788739] overlayfs: filesystem on './bus' not supported as upperdir [ 324.815789] *** Host State *** [ 324.829419] audit: type=1804 audit(1603176109.830:231): pid=15822 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/300/bus" dev="sda1" ino=15847 res=1 [ 324.855786] RIP = 0xffffffff811ca2ea RSP = 0xffff8880486d7878 06:41:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x140) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x7c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4040005) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f53a43c4d2e186200003c97a92bd896726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c6530"]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) prctl$PR_GET_THP_DISABLE(0x2a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TIOCGRS485(r3, 0x542e, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) 06:41:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:50 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x200000, 0x1012, r1, 0x0) [ 324.884562] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 324.892751] FSBase=00007fa190cbd700 GSBase=ffff8880ae200000 TRBase=fffffe0000034000 [ 324.912157] audit: type=1804 audit(1603176109.830:232): pid=15822 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/300/bus" dev="sda1" ino=15847 res=1 [ 324.926174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.945770] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 325.037476] CR0=0000000080050033 CR3=00000000a86c2000 CR4=00000000001426f0 [ 325.107712] Sysenter RSP=fffffe0000034000 CS:RIP=0010:ffffffff87c013e0 [ 325.142289] audit: type=1804 audit(1603176109.850:233): pid=15827 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/300/bus" dev="sda1" ino=15847 res=1 [ 325.170835] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 325.177062] *** Control State *** [ 325.180975] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ea [ 325.195358] EntryControls=0000d1ff ExitControls=002fefff [ 325.201188] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 325.209970] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 325.216747] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 325.224027] reason=80000021 qualification=0000000000000000 [ 325.280544] audit: type=1804 audit(1603176109.860:234): pid=15822 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/300/bus" dev="sda1" ino=15847 res=1 [ 325.299636] IDTVectoring: info=00000000 errcode=00000000 [ 325.324780] TSC Offset = 0xffffff50d0a946db 06:41:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:51 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 06:41:51 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x400000, 0x1012, r1, 0x0) 06:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 325.330242] EPT pointer = 0x0000000092adc01e [ 325.338559] overlayfs: unrecognized mount option "woS¤0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x503c00, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000100)={0x17}) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e696c65312c6c6f776572ce0400002e2f66696c6530"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_mount_image$udf(&(0x7f0000000180)='udf\x00', &(0x7f00000001c0)='./bus\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="c3dd96c4333df9ef7e16", 0xa, 0x1}], 0x2003, &(0x7f0000000440)={[{@nostrict='nostrict'}, {@novrs='novrs'}, {@undelete='undelete'}], [{@uid_lt={'uid<'}}, {@subj_user={'subj_user', 0x3d, '/dev/vcsu\x00'}}, {@fowner_lt={'fowner<', 0xee00}}, {@seclabel='seclabel'}, {@euid_lt={'euid<', r1}}]}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:51 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6b6b6b, 0x1012, r1, 0x0) 06:41:51 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf) 06:41:51 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, 0x0) [ 325.643777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:51 executing program 4: clock_gettime(0x63b6a4b32af76c18, 0x0) [ 325.881819] overlayfs: unrecognized mount option "lowerÎ" or missing value [ 326.057550] overlayfs: unrecognized mount option "lowerÎ" or missing value 06:41:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:51 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800000, 0x1012, r1, 0x0) 06:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:51 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, 0x0) 06:41:51 executing program 4: socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40286608, 0x0) 06:41:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x922d}, 0x0, 0xc, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x40000) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x82) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 326.331271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:52 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, 0x0) [ 326.420616] overlayfs: failed to resolve './file1': -2 06:41:52 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000000, 0x1012, r1, 0x0) 06:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 326.534073] overlayfs: failed to resolve './file1': -2 06:41:52 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)) 06:41:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.+file1,\t\x00w8bdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)='net_prio.ifpriomap\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './bus', [{0x20, 'overlay\x00'}, {0x20, 'overlay\x00'}], 0xa, "527aa4b6e312ff54f4c0ea46667a4b"}, 0x2a) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 326.691250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:52 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000000, 0x1012, r1, 0x0) [ 326.767065] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 326.947014] overlayfs: unrecognized mount option " " or missing value [ 327.067635] overlayfs: unrecognized mount option " " or missing value 06:41:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 06:41:52 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)) 06:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:52 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4000000, 0x1012, r1, 0x0) 06:41:52 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000040)="cd17c28950"}) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6000002, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0xfe, 0x3, "a1"}, @timestamp={0x8, 0xa, 0x200}, @window={0x3, 0x3}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 06:41:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x4) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x1440001, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRESOCT=r1, @ANYRES64=r2]) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r3, 0x0, 0x8, 0x10001, 0x5}) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 327.272926] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.290381] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 06:41:53 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xa000000, 0x1012, r1, 0x0) 06:41:53 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22224a8, &(0x7f0000000140)) 06:41:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x61850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff, 0x2, 0x80, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x63, 0x6, 0x7, 0x5, 0x0, 0x100000000, 0x80400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x849, 0x9, 0x401, 0x8, 0x1, 0x1ff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:53 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3f000000, 0x1012, r1, 0x0) [ 327.588025] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 06:41:53 executing program 5: clock_gettime(0x9987b11fe7e16a12, 0x0) 06:41:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 06:41:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:53 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x40000000, 0x1012, r1, 0x0) 06:41:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0xf, 0x0, 0xe, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x8, 0x801, 0x70bd26, 0x25dfdbfe, {0xc, 0x0, 0x3}, [@generic="7e1070151b", @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@empty}]}, 0x24}}, 0x20000841) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(0x0, 0x0, 0x0) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) 06:41:54 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 06:41:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x4, 0x4, 0xd5, 0x2, 0x0, 0x2, 0x20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x100, 0x0, 0x6, 0x4, 0x10000, 0x3}, r1, 0xf, r0, 0x2) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:54 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6b6b6b00, 0x1012, r1, 0x0) 06:41:54 executing program 5: r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r0) 06:41:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:54 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x9, 0x0, 0x0) 06:41:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) [ 328.649029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 06:41:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:54 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xff1f0000, 0x1012, r1, 0x0) 06:41:54 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') 06:41:54 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) [ 329.240300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.288205] kauditd_printk_skb: 46 callbacks suppressed [ 329.288220] audit: type=1804 audit(1603176114.920:281): pid=16150 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/313/bus" dev="sda1" ino=15970 res=1 [ 329.454528] audit: type=1804 audit(1603176114.960:282): pid=16150 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/313/bus" dev="sda1" ino=15970 res=1 [ 329.520337] audit: type=1804 audit(1603176115.000:283): pid=16159 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/313/bus" dev="sda1" ino=15970 res=1 06:41:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb29e, 0x8}, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x3000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x2, 0x5}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:55 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) 06:41:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:55 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={0x0}}, 0x4000001) 06:41:55 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x400000000000, 0x1012, r1, 0x0) [ 329.577303] audit: type=1804 audit(1603176115.000:284): pid=16150 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/313/bus" dev="sda1" ino=15970 res=1 [ 329.653109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:55 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') [ 329.699706] audit: type=1804 audit(1603176115.340:285): pid=16181 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/314/bus" dev="sda1" ino=16125 res=1 06:41:55 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x7fffffffffffd, 0x1012, r1, 0x0) 06:41:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:41:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 329.804954] audit: type=1804 audit(1603176115.370:286): pid=16181 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/314/bus" dev="sda1" ino=16125 res=1 06:41:55 executing program 4: epoll_create(0x5) [ 329.879141] overlayfs: filesystem on './bus' not supported as upperdir [ 329.918326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) 06:41:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 329.944394] audit: type=1804 audit(1603176115.380:287): pid=16192 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/314/bus" dev="sda1" ino=16125 res=1 06:41:55 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x8000000000000, 0x1012, r1, 0x0) 06:41:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x2, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) [ 330.043539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.099781] audit: type=1804 audit(1603176115.380:288): pid=16181 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/314/bus" dev="sda1" ino=16125 res=1 [ 330.146980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.166905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.283446] audit: type=1804 audit(1603176115.530:289): pid=16202 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/315/bus" dev="sda1" ino=15819 res=1 [ 330.404307] audit: type=1804 audit(1603176115.530:290): pid=16202 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/315/bus" dev="sda1" ino=15819 res=1 06:41:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2062b041}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 06:41:56 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x10000000000000, 0x1012, r1, 0x0) 06:41:56 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/net\x00') 06:41:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:56 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0xee00, 0xee01, 0x0, 0xee01}}) [ 330.544986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:56 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock2(&(0x7f0000690000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r1, 0x0, 0x7fffffff) 06:41:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 06:41:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:56 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x20000000000000, 0x1012, r1, 0x0) [ 330.853125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) 06:41:56 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x7041, 0x0) 06:41:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:56 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6b6b6b00000000, 0x1012, r1, 0x0) 06:41:56 executing program 4: getitimer(0x3, &(0x7f00000000c0)) [ 331.264035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.397216] overlayfs: filesystem on './bus' not supported as upperdir 06:41:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 06:41:57 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) 06:41:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:57 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x80000000000000, 0x1012, r1, 0x0) 06:41:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x20, 0x2, 0x1, 0x0, 0x5, 0x81a80, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000100), 0x7}, 0x10882, 0x5, 0xff, 0x6, 0x3, 0xb83, 0x7fff}, r1, 0xe, r0, 0x8) getpriority(0x2, 0x0) socket(0x0, 0x1, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x51) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707045726469723d6b6469723f771f4dc97765010000003d2e2f5b696c6530000000000000"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)) umount2(&(0x7f0000000280)='./bus\x00', 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f00000003c0)=0xe, 0x800) [ 331.625891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:57 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 06:41:57 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x100000000000000, 0x1012, r1, 0x0) 06:41:57 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000002c0), 0x4) 06:41:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 331.785402] overlayfs: unrecognized mount option "uppErdir=kdir?wMÉwe" or missing value 06:41:57 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x13, 0x0, 0x0) 06:41:57 executing program 5: keyctl$KEYCTL_CAPABILITIES(0xa, 0x0, 0x0) [ 331.877074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x2, 0x1, 0x801}, 0x14}}, 0x0) 06:41:57 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x200000000000000, 0x1012, r1, 0x0) 06:41:57 executing program 4: bpf$PROG_LOAD(0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 331.956020] overlayfs: unrecognized mount option "uppErdir=kdir?wMÉwe" or missing value 06:41:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="75707065726469723d2f66006c65312c6c6f7765727ad182031bc5bc156c653000000000000000000200000000000024ac8ce14d90a410394016"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)=@getchain={0x24, 0x66, 0x501}, 0x24}}, 0x0) [ 332.344217] overlayfs: missing 'lowerdir' [ 332.430650] overlayfs: missing 'lowerdir' 06:41:58 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x400000000000000, 0x1012, r1, 0x0) 06:41:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:58 executing program 4: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x282100) 06:41:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f9e150f57964b186275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d"]) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:58 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:41:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2, 0x0, 0x0, 0x1}) [ 332.727690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:58 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xa00000000000000, 0x1012, r1, 0x0) 06:41:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1, &(0x7f0000000580)=@raw=[@call], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 332.826241] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:41:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 332.979377] overlayfs: unrecognized mount option "lowerdir=" or missing value 06:41:58 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 06:41:58 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 06:41:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0xc0100, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000100)={0x6, 0x40, 0x2}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000180)={0x3, 0x1, 0x15, 0x8, 0xd3, &(0x7f0000000440)}) socket$kcm(0x29, 0x7, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000001c0), 0x4) 06:41:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:58 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3f00000000000000, 0x1012, r1, 0x0) 06:41:58 executing program 5: getitimer(0x1, &(0x7f00000001c0)) [ 333.135373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:41:58 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 06:41:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan0\x00'}) 06:41:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4000000000000000, 0x1012, r1, 0x0) 06:41:59 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 06:41:59 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 06:41:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) r2 = dup2(r1, r0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x7) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:59 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) 06:41:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x8000000000000000, 0x1012, r1, 0x0) 06:41:59 executing program 5: openat$bsg(0xffffffffffffff9c, 0x0, 0x24102, 0x0) 06:41:59 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 06:41:59 executing program 5: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 06:41:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xfdffffffffff0700, 0x1012, r1, 0x0) 06:41:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:59 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000002c0), 0x4) 06:41:59 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x50001, 0x0) 06:41:59 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) 06:41:59 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) 06:41:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xff1f000000000000, 0x1012, r1, 0x0) 06:41:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:41:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) poll(&(0x7f0000000100)=[{r1, 0x28}, {r0, 0x8004}, {r0, 0x40a4}], 0x3, 0xbaa) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:41:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:41:59 executing program 5: r0 = epoll_create(0xfd) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 06:41:59 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x4040, 0x0) 06:42:00 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xffffffff00000000, 0x1012, r1, 0x0) 06:42:00 executing program 5: epoll_create(0xfd) 06:42:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:00 executing program 4: syz_open_procfs(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan0\x00'}) [ 334.472455] kauditd_printk_skb: 59 callbacks suppressed [ 334.472470] audit: type=1804 audit(1603176120.110:350): pid=16595 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/330/bus" dev="sda1" ino=15819 res=1 [ 334.496082] nla_parse: 4 callbacks suppressed [ 334.496093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:00 executing program 5: sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x0) 06:42:00 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x3a8, 0x0, 0x0, "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"}, {0xb0, 0x0, 0x0, "1c1c26f3cc0614123ffde1680fa1a6b44bf2a5204fa2ed8e10650f94af021068674d90315ed0f849b3e8a49a4d565136e8b4be3f9dd48dd551e7c5b17296644b1b3e0f0acff9ad857c0f1e4bfd0ce459170b4486cb501ffdc421714a054e4be1603c1b28ea6cb0946833df1d0aa48e7a849a898d3d3c7102b815095b14740390fcb235ee6871afe4075a95de77694c238cf101406cc505265b7bde6761e0895c"}, {0xe8, 0x8, 0x2, "9fd574c6a7ff974d2672532ff8f49c74b8b1273cf31acb1962f66aec9546fe9651a1473bc1797b4554d1af684ab28ddc840c141ba247d810dcaf01df8628b4be24639083d1f96703b60a0e70c603649e9fd2b069325a4ddb95c91fa05238fa119a184bd2e14a7f52a2ebaf14c8e72e71dd822c7b2a9f1bcffb1f1843ace1bbe5cc82af752aeb01f4ba31a644cdf722604b7bb6b4f18753dd9035ef5f356e365eada10f6c197c3c9571add84bb746bcfdca8aa98737f9b46b69e7af972c5ab39bd67d7bf37b44cc38200be0c3d696f3d7119db9c71f90"}, {0xf0, 0x102, 0x7, "ab93bdbfe17ae6dca0af84fd30242e2bb5185ca3a7b59cd85b78d0562d105de7e24fa0959a059655d76155fa33666fb46002bfb323e7d07213b74caa7a9bd136c4d1fff868f3ab80fa32878e18a1eeaa7b8cfbf56818a837acdc3d190ec598a61815bce6c939820e1f133ff6003ad9e64cf89fca37ad5ec8653be9b1f3f982b7bd740b911fa93f2a842527babf51c0768141d64ce6b42f6d78b98bc097524c48dc8d0b1e25a958b23c37b41a0fdaa9f21e7941c3782213867d47423a44a89a11da23bdaedd56823377f9458f7c5294292ab4b621ac165da5a41253"}, {0xa8, 0x0, 0x8001, "9c09491b6bf818ff7aebe4faa776c5a763e86786775d16ab8a543374e52a8f180755c090aee5199aff5c56aaa541423cf19931d9ad93de143c68b5f705375a68c827e7dea9c3b2b66a2c85d14eff34fdcee4b4607cefcf7fceeffdf29c73c26c39f02b8687badca62dd0c09e3580e3ffc2888af7637eab1b0aa32e1740912250e4f710988d6699fadb4605a3cf481190d632bd0b82b9ff"}], 0x6d8}, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x541b, 0x759000) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'ipvlan1\x00', @link_local}) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r1, &(0x7f0000001cc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @empty}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x5, &(0x7f00000009c0)=ANY=[@ANYRESOCT], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xff, &(0x7f0000000300)=""/255, 0x40f00, 0xa, [], r2, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x10, 0x2, 0xc1}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x2de5, 0x0, 0x0, 0x41100, 0x1, [], r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x10}, 0x10}, 0x78) 06:42:00 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x2) [ 334.564690] audit: type=1804 audit(1603176120.150:351): pid=16595 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/330/bus" dev="sda1" ino=15819 res=1 [ 334.635393] device ipvlan1 entered promiscuous mode [ 334.659769] audit: type=1804 audit(1603176120.160:352): pid=16604 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/330/bus" dev="sda1" ino=15819 res=1 [ 334.764175] audit: type=1804 audit(1603176120.170:353): pid=16595 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/330/bus" dev="sda1" ino=15819 res=1 [ 334.820804] audit: type=1804 audit(1603176120.340:354): pid=16617 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/331/bus" dev="sda1" ino=15939 res=1 [ 334.874015] audit: type=1804 audit(1603176120.350:355): pid=16617 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/331/bus" dev="sda1" ino=15939 res=1 06:42:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:00 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000003c0), 0x10) 06:42:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:00 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x301040, 0x0) 06:42:00 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x4) 06:42:00 executing program 5: write$rfkill(0xffffffffffffffff, 0x0, 0x0) [ 335.225903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000003c0), 0x4) [ 335.267219] audit: type=1804 audit(1603176120.900:356): pid=16643 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/332/bus" dev="sda1" ino=15824 res=1 06:42:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:01 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x8) 06:42:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="400000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="0700ff"], 0x40}}, 0x0) [ 335.427124] audit: type=1804 audit(1603176120.980:357): pid=16643 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/332/bus" dev="sda1" ino=15824 res=1 [ 335.526098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.592941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 335.609830] audit: type=1804 audit(1603176121.190:358): pid=16670 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/333/bus" dev="sda1" ino=15913 res=1 [ 335.691097] audit: type=1804 audit(1603176121.200:359): pid=16670 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/333/bus" dev="sda1" ino=15913 res=1 [ 335.722833] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 335.756081] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 06:42:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 06:42:01 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0xa) 06:42:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x20) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b01000000000000006c65312c6c6f7765726449723d2e2f66696c6530"]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x2}, @mss={0x2, 0x7}, @sack_perm, @sack_perm, @window={0x3, 0x6, 0x1c00}, @timestamp], 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000100)) 06:42:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:01 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'rwm\x00'}, 0xa) 06:42:01 executing program 5: getitimer(0x0, &(0x7f00000001c0)) [ 335.937737] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:01 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) [ 335.992130] overlayfs: unrecognized mount option "work" or missing value 06:42:01 executing program 5: 06:42:01 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x10) 06:42:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 336.084888] overlayfs: unrecognized mount option "work" or missing value 06:42:01 executing program 4: [ 336.172775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="363e2e55066ed71cad2afb5e9321120255ca01b6d4df22e927486bd714b9152c698ab3e6df1c710a3b16978b6444baf6ec6001da6e5b3ca4934b67cf131a91a04ca720773f003817c653de6cb63b91c8b7f483cadc826fb877ff5bb5011e2d3ae11bd7ed6318e011ec3f65b70ad94f65d40a4232b90a72f0c3a60b598fbece53915be401", 0x84}], 0x1, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xa8, 0x117, 0x2, 0x94, "7c72659f5c53ddd290fb3fdd91460e61c74bbfba1a368fd93bcdea0b1866ea44220d1e8bb5db07f712fabeb8ba3620d207fbc16aa45063b40682bbcfd9e6e2aa8d9d3421dbbc26fd785690e73564a89bdd7115e67523225c171e5275eff080b8d30dc4682d68ee5c9673ff767a0a1a63b4cc48d67960188705f60a365e5a4e988eddf0abea5b87f9611b811e1a53ab44e10ed90c"}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @iv={0x40, 0x117, 0x2, 0x26, "2b8e4817c2a48c6c897cb3ca1cb3099dbd0cc1b9889469332536d0ce9635346352b059391160"}], 0x118, 0x20040800}, 0x5) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:02 executing program 5: socket$bt_rfcomm(0x1f, 0x0, 0x3) 06:42:02 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 06:42:02 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0xa00) 06:42:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 336.691995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:02 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x301040, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) 06:42:02 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000002c0)=0x7fffffff, 0x4) [ 336.763359] *** Guest State *** [ 336.791633] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 06:42:02 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x1fff) 06:42:02 executing program 4: [ 336.856880] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 336.885293] CR3 = 0x0000000000000000 [ 336.906899] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 336.940783] RFLAGS=0x00000002 DR7 = 0x0000000000000400 06:42:02 executing program 4: 06:42:02 executing program 5: [ 336.969279] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 337.016546] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 337.122786] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.174815] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 337.202224] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.213102] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.223071] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.232296] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 337.243152] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 337.252143] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 337.261571] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 337.270584] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 337.277096] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 337.286430] Interruptibility = 00000000 ActivityState = 00000000 [ 337.293843] *** Host State *** [ 337.297164] RIP = 0xffffffff811ca2ea RSP = 0xffff88802bf8f878 [ 337.306578] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 337.318368] FSBase=00007fa190cde700 GSBase=ffff8880ae200000 TRBase=fffffe0000034000 [ 337.338963] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 337.347789] CR0=0000000080050033 CR3=000000008d7c0000 CR4=00000000001426f0 [ 337.356031] Sysenter RSP=fffffe0000034000 CS:RIP=0010:ffffffff87c013e0 [ 337.367809] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 337.375528] *** Control State *** [ 337.380320] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ea [ 337.387096] EntryControls=0000d1ff ExitControls=002fefff [ 337.393595] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 337.401029] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 337.407731] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 337.414925] reason=80000021 qualification=0000000000000000 06:42:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:03 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x2000) 06:42:03 executing program 5: 06:42:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) membarrier(0x8, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:03 executing program 4: [ 337.421367] IDTVectoring: info=00000000 errcode=00000000 [ 337.426854] TSC Offset = 0xffffff49e689a789 [ 337.431271] EPT pointer = 0x000000009643001e [ 337.435677] Virtual processor ID = 0x000e [ 337.514016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:03 executing program 5: 06:42:03 executing program 4: 06:42:03 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x3f00) 06:42:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:03 executing program 5: 06:42:03 executing program 4: [ 338.206369] overlayfs: filesystem on './bus' not supported as upperdir 06:42:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:04 executing program 5: 06:42:04 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x4000) 06:42:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:04 executing program 4: 06:42:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r2 = dup2(r0, r1) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x30, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:04 executing program 5: 06:42:04 executing program 4: 06:42:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:04 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0xff1f) 06:42:04 executing program 5: 06:42:04 executing program 4: [ 339.024918] overlayfs: filesystem on './bus' not supported as upperdir 06:42:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:04 executing program 5: 06:42:04 executing program 4: 06:42:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:04 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x80000) 06:42:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x3, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:05 executing program 4: 06:42:05 executing program 5: 06:42:05 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x100000) 06:42:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:05 executing program 5: 06:42:05 executing program 4: [ 339.633712] kauditd_printk_skb: 23 callbacks suppressed [ 339.633728] audit: type=1804 audit(1603176125.270:383): pid=16941 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/343/bus" dev="sda1" ino=16201 res=1 [ 339.650006] nla_parse: 4 callbacks suppressed [ 339.650016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 339.820807] audit: type=1804 audit(1603176125.320:384): pid=16941 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/343/bus" dev="sda1" ino=16201 res=1 [ 339.892072] audit: type=1804 audit(1603176125.360:385): pid=16948 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/343/bus" dev="sda1" ino=16201 res=1 [ 339.931637] audit: type=1804 audit(1603176125.360:386): pid=16941 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/343/bus" dev="sda1" ino=16201 res=1 06:42:05 executing program 5: 06:42:05 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x200000) 06:42:05 executing program 4: 06:42:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x20102, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) r2 = signalfd4(r0, &(0x7f0000000100)={[0x8]}, 0x8, 0x800) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x41}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008804) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:05 executing program 5: 06:42:05 executing program 4: [ 340.273337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.274791] audit: type=1804 audit(1603176125.910:387): pid=16976 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/344/bus" dev="sda1" ino=16280 res=1 06:42:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:06 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x400000) 06:42:06 executing program 5: 06:42:06 executing program 4: [ 340.396935] overlayfs: missing 'lowerdir' 06:42:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 340.465730] audit: type=1804 audit(1603176125.960:388): pid=16976 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/344/bus" dev="sda1" ino=16280 res=1 [ 340.557680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.572268] overlayfs: missing 'lowerdir' 06:42:06 executing program 5: 06:42:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0xe9) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000001c0)=""/81) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c772e2f66696c65312c6c6f7765726469723d2e2f66696c6530ec8ca24c8dc52c7b35c4228abb87c9c31133b1cded25f6db7a0f845249c7c90842b04243f8c169c2e38d1889d7b8f5a09e66"]) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 340.589698] audit: type=1804 audit(1603176125.970:389): pid=16986 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/344/bus" dev="sda1" ino=16280 res=1 [ 340.614316] audit: type=1804 audit(1603176125.970:390): pid=16976 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/344/bus" dev="sda1" ino=16280 res=1 06:42:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:06 executing program 4: [ 340.683712] audit: type=1804 audit(1603176126.220:391): pid=16998 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/345/bus" dev="sda1" ino=16263 res=1 06:42:06 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x6b6b6b) 06:42:06 executing program 5: 06:42:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 340.825177] audit: type=1804 audit(1603176126.220:392): pid=16998 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/345/bus" dev="sda1" ino=16263 res=1 06:42:06 executing program 4: 06:42:06 executing program 5: 06:42:06 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x800000) [ 340.930053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:06 executing program 5: 06:42:06 executing program 4: [ 341.033853] overlayfs: unrecognized mount option "w./file1" or missing value 06:42:06 executing program 5: [ 341.162235] overlayfs: unrecognized mount option "w./file1" or missing value 06:42:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r0, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/72, 0x48}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200)={0x43, 0x10000, 0x8001, 0x1, 0x8000}, 0x14) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d030000000000040000003d71723d2e2f66696c65312c6c6f3765726469723d432f66696c653089b5488951c98ad55ac0f9b54911478194d20f429379b8ff2098ee899398dbb1e6821bb2e54e2dd2599871097a0195e411925690"]) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001440)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 341.513871] overlayfs: missing 'lowerdir' [ 341.587441] overlayfs: missing 'lowerdir' 06:42:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:07 executing program 4: 06:42:07 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x1000000) 06:42:07 executing program 5: 06:42:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d4d2f6275732c77a70b0000000000002f66696c65312c6c6f7765726469723d2e2f66696c6530"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:07 executing program 5: [ 341.719747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:07 executing program 4: 06:42:07 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x2000000) 06:42:07 executing program 5: 06:42:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 341.895538] overlayfs: unrecognized mount option "w§ " or missing value 06:42:07 executing program 4: [ 342.009421] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 342.013974] overlayfs: unrecognized mount option "w§ " or missing value 06:42:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:08 executing program 5: 06:42:08 executing program 4: 06:42:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x4000000) 06:42:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) lchown(&(0x7f0000000180)='./file2\x00', 0xee00, 0xee01) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x1], 0x2) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:08 executing program 5: [ 342.465725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0xa000000) 06:42:08 executing program 4: 06:42:08 executing program 4: 06:42:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x3f000000) 06:42:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 343.240007] overlayfs: filesystem on './bus' not supported as upperdir 06:42:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:08 executing program 4: 06:42:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:08 executing program 5: 06:42:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x2, 0x1000, 0x10000, 0x7], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000180)) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x60) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x40000000) 06:42:09 executing program 4: 06:42:09 executing program 5: 06:42:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:09 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x6b6b6b00) 06:42:09 executing program 4: 06:42:09 executing program 5: 06:42:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x8, 0x9, 0x4, 0x2, 0x7, {0x77359400}, {0x2, 0x1, 0x3, 0x7, 0x1, 0x6, "e83399f1"}, 0x2, 0x2, @offset=0x1000, 0x3}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @device_a, @broadcast, @device_b, {0x3, 0xf74}, @broadcast}, {0x9, 0x1, 0x0, 0x0, 0x4}}, {@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x80}, @device_a, @initial, @random="608c62d23266", {0x3, 0x9}}, {0x5, 0x0, 0x2, 0x1, 0xe0}}}, @random="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"}, 0x345) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000180)={0x2, 0x1, @start={0x9, 0x1}}) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:09 executing program 4: 06:42:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:09 executing program 5: 06:42:09 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0xff1f0000) 06:42:09 executing program 4: 06:42:09 executing program 5: 06:42:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:09 executing program 4: [ 344.290096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:42:09 executing program 5: 06:42:10 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x400000000000) 06:42:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:10 executing program 5: 06:42:10 executing program 4: 06:42:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:10 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x7fffffffffffd) 06:42:10 executing program 2: ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = syz_mount_image$hpfs(&(0x7f00000000c0)='hpfs\x00', &(0x7f0000000100)='./file1\x00', 0x5, 0x4, &(0x7f0000000380)=[{&(0x7f0000000180)="077c920b062bc8c775d0c21a83d4eb5978051f1e026efa534e838d9671abef68", 0x20, 0x4}, {&(0x7f00000001c0)="d218ab34743e40f2b7cb4f6a64c98a5880b3fe3523dfd7446b7ecd327906a73169a9796ba709083e3bde6d73a6293f02b904f92964de0d4a1cf31fef91c29764a19542c83150e626ac1183e9af22ee3900c9be79e627544afe8182dfd3cecde25a4493cb26214d742bce6ccd9e1619a801f37baddaec54d6a5115c", 0x7b, 0x9d}, {&(0x7f00000002c0)="ee8947307cbd52a3e4b88b2ab5bfc317140096f8a58cad587395ad6769105e6916063cf960e0c837337452324fe431333db2d7394c73ee207d0a22e6102192c48aa12845aa3200d64e0a809861135b8a1e5af0fd41759ae7ffc13569d8ad519c15a666596614a8cf43a1b563d090d1055d0f7edc3b1ba270387b16743d4f3cb1fb58fb297639fbc9fac66504eec25cacec0e064882c2a67575afade779e022", 0x9f, 0x7}, {&(0x7f0000000440)="e645d9e59693d33fbee88cf6305621038b549af08750f8665cc6572b888cff3c48e8d3d1d4b96fdaab3fb4069bc33b11635eac08b0e31573e119ae0844ee9b4d421a2cd2313383a41ab144fdd922fa8ead48eac58037e2d18a99337ebe4a21ad2a459392a117d08f15e3e5b419033a9b203f7269d1b305aa223b84803a27f87f463a2d99b72ed37b4c9081177d6446cb4c2f4ad4116bfeb49c533a74b68be1e8c2d24678f483bc1f9e48b91a02c1515ec9d424656ac5d72a89894bdc3b5a9a3f9849631e41b4743d2548065f1b26434d4f", 0xd1, 0x8}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="6f7665726c6179002c61756469742c6f626a5f740170653d2f6465762f76636275002c00"]) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0xc00, &(0x7f00000005c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000740)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/full\x00', 0x210080, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000800)=0x3) r3 = dup(r0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000006c0)=0x41, &(0x7f0000000700)=0x1) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 345.172872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.183171] overlayfs: filesystem on './bus' not supported as upperdir 06:42:10 executing program 5: 06:42:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:10 executing program 4: [ 345.290117] kauditd_printk_skb: 42 callbacks suppressed [ 345.290131] audit: type=1804 audit(1603176130.930:435): pid=17273 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/357/bus" dev="sda1" ino=15883 res=1 06:42:11 executing program 5: 06:42:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:11 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x8000000000000) 06:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:11 executing program 4: [ 345.440878] audit: type=1804 audit(1603176130.980:436): pid=17273 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/357/bus" dev="sda1" ino=15883 res=1 06:42:11 executing program 5: 06:42:11 executing program 4: [ 345.621493] audit: type=1804 audit(1603176131.260:437): pid=17296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/358/bus" dev="sda1" ino=16248 res=1 [ 345.652122] hpfs: bad mount options. [ 345.667474] audit: type=1804 audit(1603176131.300:438): pid=17296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/358/bus" dev="sda1" ino=16248 res=1 [ 345.777047] audit: type=1804 audit(1603176131.340:439): pid=17304 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/358/bus" dev="sda1" ino=16248 res=1 [ 345.869388] audit: type=1804 audit(1603176131.340:440): pid=17296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/358/bus" dev="sda1" ino=16248 res=1 [ 346.027125] hpfs: bad mount options. 06:42:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000200)=0x16, 0x4) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c67312c6c6f7765726469723d2e2f66696c653036c01f620c56558f10a1d44e30c22ccd4cb833ff052afff7c02121c49bccd9c6fbaab72efaa9327f25ebf344a85d1bcbbd5b16e9f74d6140e1c93343261560ce3c09ceb150c529c3f04702f3b5f48cd4aa7296957aed34c1fed1e3ad1031ca0f8b3d4405d47334a3b528d021042b5e350c57a9438e2b4bd799eddb7e55e021d4f626ef3b0cf96ce89dabcdbb62f27245a295c72f505943176b33f81320a333b534bcc84c2308d218"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0xff, 0x65, 0x3, 0x1f, 0x0, 0xdc, 0x8040, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1000, 0x8, 0x4, 0xa, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r1, 0xa) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:11 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x10000000000000) 06:42:11 executing program 5: 06:42:11 executing program 4: 06:42:11 executing program 4: [ 346.143844] audit: type=1804 audit(1603176131.780:441): pid=17328 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/359/bus" dev="sda1" ino=15916 res=1 06:42:11 executing program 5: [ 346.203601] audit: type=1804 audit(1603176131.830:442): pid=17328 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/359/bus" dev="sda1" ino=15916 res=1 06:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:11 executing program 4: 06:42:12 executing program 5: [ 346.355235] audit: type=1804 audit(1603176131.890:443): pid=17338 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/359/bus" dev="sda1" ino=15916 res=1 [ 346.464636] overlayfs: unrecognized mount option "ÍL¸3˙*˙÷Ŕ!!ěĚŮĆűŞˇ.úŠ2%ëóD¨]Ë˝[é÷Ma@áÉ3C&`Î< ÎąPĹ)ĂđGóľôŒÔŞr–•zí4ÁţŃă­1Ę‹=DÔs4Łľ(Đ!+^5 WŠCŽ+KיíŰ~Uŕ!Ôö&ď; ůl蝫ͻbňrE˘•Ç/PYCk3ř Ł3ľ4źČL#Ň" or missing value [ 346.504754] audit: type=1804 audit(1603176131.890:444): pid=17328 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/359/bus" dev="sda1" ino=15916 res=1 [ 346.548388] overlayfs: unrecognized mount option "ÍL¸3˙*˙÷Ŕ!!ěĚŮĆűŞˇ.úŠ2%ëóD¨]Ë˝[é÷Ma@áÉ3C&`Î< ÎąPĹ)ĂđGóľôŒÔŞr–•zí4ÁţŃă­1Ę‹=DÔs4Łľ(Đ!+^5 WŠCŽ+KיíŰ~Uŕ!Ôö&ď; ůl蝫ͻbňrE˘•Ç/PYCk3ř Ł3ľ4źČL#Ň" or missing value 06:42:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:12 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x20000000000000) 06:42:12 executing program 4: 06:42:12 executing program 5: 06:42:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:12 executing program 5: 06:42:12 executing program 4: 06:42:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:12 executing program 4: 06:42:12 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x6b6b6b00000000) [ 346.803227] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.242489] overlayfs: filesystem on './bus' not supported as upperdir 06:42:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x1, 0x2, 0x7}, 0x1000}}, 0x18) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75557065726469723d2e001075732c776f726b6469723d2e2f66690000312c6c6f7765726469723d2e2f66696c6530"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2101, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:12 executing program 5: 06:42:12 executing program 4: 06:42:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:12 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x80000000000000) 06:42:13 executing program 5: 06:42:13 executing program 4: [ 347.388964] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 347.455597] overlayfs: unrecognized mount option "uUperdir=." or missing value 06:42:13 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x100000000000000) 06:42:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:13 executing program 5: [ 347.537228] overlayfs: unrecognized mount option "uUperdir=." or missing value 06:42:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x8, 0x1, 0x9, 0x28, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_key={0x12, 0x9, 0x428, 0x0, "88559f25e85118ad60557545c0ddbacc33080cdc21267cb6dfc4a9796a6d52f2df55cbdbba6f81c83ccdc74d1a37f88a50594333e51eb1b4beb8d3e9ae90bc9b4d504eb94e77514be8767ce552e350e7a6ac51ffa380f225c4a1e3d251a2a4b708bd912791c829fa5171416ae7d3d78e9e0a998bd1caf75fced60d62f2a174c4a2288bab7f"}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in6=@remote, 0x0, 0x10, 0x4}, @sadb_address={0x5, 0x5, 0x3c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [], @rand_addr=0x64010100}, 0x81}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bb7, 0x401, {0x6, 0xff, 0x1, 0x9, 0x0, 0x7, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback}}]}, 0x140}}, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:13 executing program 4: 06:42:13 executing program 5: [ 347.614281] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:13 executing program 4: 06:42:13 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:13 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x200000000000000) 06:42:13 executing program 5: 06:42:13 executing program 4: [ 347.838751] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:13 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:13 executing program 5: [ 348.065101] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x8}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x200, 0x4) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:13 executing program 4: 06:42:13 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x400000000000000) 06:42:13 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:13 executing program 5: 06:42:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 348.254442] overlayfs: filesystem on './bus' not supported as upperdir 06:42:14 executing program 4: [ 348.375293] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:14 executing program 5: 06:42:14 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:14 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0xa00000000000000) 06:42:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:14 executing program 4: 06:42:14 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:14 executing program 5: 06:42:14 executing program 4: 06:42:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x1, 0x8000, 0x7}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:14 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x3f00000000000000) [ 348.874925] overlayfs: filesystem on './bus' not supported as upperdir 06:42:14 executing program 5: 06:42:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'rose0\x00', @ifru_map}}) 06:42:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:14 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:14 executing program 5: 06:42:14 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x4000000000000000) 06:42:14 executing program 4: 06:42:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:14 executing program 5: [ 349.245264] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:14 executing program 4: 06:42:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:15 executing program 5: 06:42:15 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x8000000000000000) 06:42:15 executing program 4: 06:42:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=[0x2, 0x5, 0xbed, 0x1, 0xf800, 0x1], &(0x7f0000000300)=[0x5, 0x7, 0x100, 0x1, 0x7fff, 0x7, 0xc00, 0x6, 0x200], &(0x7f0000000340)=[0x5, 0x2511, 0x1ed5, 0x3], &(0x7f0000000380)=[0x7, 0x1ff, 0x200, 0x7, 0x5]}) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000200)=0x9) getpriority(0x2, 0x0) r2 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000180)={'team_slave_0\x00', {0x2, 0x0, @loopback}}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x232c42, 0x21) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)={0x5d, 0xce54, "77b90e90c7b8685f613a5668ae40f31de6e415c9ec095b78e2a1c1ebb9b82ac55479de2a0f89485a98389e723adcb0e1f5c2a56d64509e986f540a53a03c463f82733929326fbbcc945027a1784b722f8509d0b432"}, 0x400c00) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:15 executing program 5: [ 349.683861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:15 executing program 4: 06:42:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:15 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0xfdffffffffff0700) 06:42:15 executing program 5: [ 349.844855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:15 executing program 4: 06:42:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:15 executing program 5: [ 350.064586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x81}]}, 0xc, 0x0) 06:42:15 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0xff1f000000000000) 06:42:15 executing program 4: 06:42:15 executing program 5: 06:42:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:15 executing program 5: 06:42:15 executing program 4: 06:42:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:16 executing program 5: [ 350.311293] kauditd_printk_skb: 41 callbacks suppressed [ 350.311306] audit: type=1804 audit(1603176135.950:486): pid=17604 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/371/bus" dev="sda1" ino=15914 res=1 06:42:16 executing program 4: 06:42:16 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0xffffffff00000000) 06:42:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x8c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x1, 0x7fff}, 0x90) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000380)=0x30) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f779564c64e8561776d2e7c8ce58a19ac65726469723d2e2f66696c6530389a1e183c4b"]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:16 executing program 5: 06:42:16 executing program 4: [ 350.594422] audit: type=1804 audit(1603176136.230:487): pid=17628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/372/bus" dev="sda1" ino=16251 res=1 06:42:16 executing program 5: 06:42:16 executing program 4: 06:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:16 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2570598adbfde557}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) [ 350.701176] overlayfs: unrecognized mount option "low•dĆN…awm.|ŒĺŠŹerdir=./file08š0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r0 = open(&(0x7f0000000340)='./file1\x00', 0x942, 0x84) getpeername$netrom(r0, &(0x7f0000000380)={{0x3, @null}, [@bcast, @rose, @bcast, @remote, @bcast, @default, @rose, @default]}, &(0x7f0000000440)=0x48) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x118) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7fff, 0x200) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}], 0x0, 0x0, [], 0x6, 0x1}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x400086, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000300)) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x1) 06:42:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:16 executing program 4: 06:42:16 executing program 5: [ 350.906524] audit: type=1804 audit(1603176136.540:489): pid=17662 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/373/bus" dev="sda1" ino=15888 res=1 06:42:16 executing program 4: 06:42:16 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 351.046163] audit: type=1804 audit(1603176136.590:490): pid=17662 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/373/bus" dev="sda1" ino=15888 res=1 06:42:16 executing program 5: [ 351.105946] overlayfs: './file1' not a directory 06:42:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:16 executing program 4: 06:42:16 executing program 5: [ 351.207176] overlayfs: './file1' not a directory 06:42:16 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp, 0x10, 0x2, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x20, 0x484000) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000180)=0xde65) connect$rds(r0, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) [ 351.253342] audit: type=1804 audit(1603176136.620:491): pid=17669 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/373/bus" dev="sda1" ino=15888 res=1 06:42:16 executing program 4: 06:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:17 executing program 5: 06:42:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="757070657275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c6530f1eb5d09b3022eac10c716ef0f6068a2b50761e0640129e1704673262ec81ac5f0ccb78c83506e9a9fda6e2550537f558bf448037fd22998cfaa2319cd544c5ddf62da421e097b24ae90540959c89f5ba122efae6f4a4cd22f72c8932579301e3e00000000000000"]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x4, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x0, 0x23f, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x3584d2cab0536e82) accept4$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_getaffinity(r3, 0x8, &(0x7f0000000180)) 06:42:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:17 executing program 4: [ 351.455804] audit: type=1804 audit(1603176136.620:492): pid=17662 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/373/bus" dev="sda1" ino=15888 res=1 06:42:17 executing program 5: 06:42:17 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xdc) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xaf}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x20048014) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:17 executing program 5: 06:42:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 351.704802] audit: type=1804 audit(1603176136.810:493): pid=17688 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/374/bus" dev="sda1" ino=16176 res=1 06:42:17 executing program 4: 06:42:17 executing program 5: [ 351.851467] overlayfs: unrecognized mount option "upperus" or missing value 06:42:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:17 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = signalfd4(r0, &(0x7f0000000100)={[0x1000]}, 0x8, 0x80800) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000180)=""/190) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) [ 351.915192] audit: type=1804 audit(1603176136.830:494): pid=17688 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/374/bus" dev="sda1" ino=16176 res=1 06:42:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xd747, 0x7f, 0xff, 0xc5bf}, {0x3b5a, 0x2, 0xe4, 0xff}, {0x7, 0xe, 0x69, 0x5}]}) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:17 executing program 4: 06:42:17 executing program 5: [ 352.007166] audit: type=1804 audit(1603176136.850:495): pid=17693 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/374/bus" dev="sda1" ino=16176 res=1 [ 352.045244] nla_parse: 7 callbacks suppressed 06:42:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 352.045254] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:17 executing program 4: 06:42:17 executing program 5: 06:42:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:17 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101100, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000180), 0x4) write$P9_RWRITE(r0, &(0x7f00000001c0)={0xb, 0x77, 0x2, 0x5}, 0xb) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:17 executing program 4: 06:42:17 executing program 5: [ 352.262358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:18 executing program 5: 06:42:18 executing program 4: 06:42:18 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)={0x2, "fe2f"}, 0x3) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000008c0)={0x9, &(0x7f0000000180)=""/93, &(0x7f00000007c0)=[{0x1140b56, 0x1b, 0x5, &(0x7f0000000200)=""/27}, {0x6, 0x7b, 0x7, &(0x7f0000000240)=""/123}, {0xfa39, 0xc4, 0x4dba, &(0x7f00000002c0)=""/196}, {0x80, 0x7f, 0xfffffc01, &(0x7f00000003c0)=""/127}, {0x85, 0xbf, 0x8, &(0x7f0000000440)=""/191}, {0xfffffa72, 0x94, 0xfffffffd, &(0x7f0000000500)=""/148}, {0x5, 0x79, 0x6c03, &(0x7f00000005c0)=""/121}, {0x8, 0xf9, 0x8, &(0x7f0000000640)=""/249}, {0x8a, 0x70, 0x8, &(0x7f0000000740)=""/112}]}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/dlm-control\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000940)={0x5, 0x70, 0x6, 0x9, 0x3, 0x2f, 0x0, 0x0, 0x3a642, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x218, 0x2, @perf_bp={&(0x7f0000000900), 0x4}, 0x8, 0xffff, 0xc1, 0x6, 0xfffffffffffff15e, 0x1, 0x8}, 0xffffffffffffffff, 0x0, r1, 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) 06:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:18 executing program 5: 06:42:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000100)={0xe93f, &(0x7f00000000c0)}) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707f2a57ebe9419cad431b103336f06bc1e93d6ef870776572716469723d000000000000000000000000000000000000000e0971437f761976a83102d20e916373a5106698f8990be3859285053136c834ba980b514bb8b1f4de2a460fd7be35e7325db4b165dc4400a4c3dbb6c068f92c1fda7a4774fe945c892c4ffd0f1c8f8b27b00171ca18da4466b12f7105695f5b68cedbd72d00ba8e4c"]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:18 executing program 4: 06:42:18 executing program 5: [ 352.818608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:18 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:18 executing program 5: 06:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 353.017066] overlayfs: unrecognized mount option "up*WëéAœ­C36đkÁé=nřpwerqdir=" or missing value 06:42:18 executing program 5: 06:42:18 executing program 4: [ 353.105875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.131484] overlayfs: unrecognized mount option "up*WëéAœ­C36đkÁé=nřpwerqdir=" or missing value 06:42:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,worcdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:18 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x10008, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:18 executing program 5: 06:42:18 executing program 4: 06:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:18 executing program 5: 06:42:18 executing program 4: 06:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:19 executing program 4: 06:42:19 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) accept(0xffffffffffffffff, &(0x7f0000000180)=@caif=@util, &(0x7f0000000100)=0x80) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) openat$cgroup_ro(r1, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) 06:42:19 executing program 5: [ 353.658125] overlayfs: unrecognized mount option "worcdir=./file1" or missing value 06:42:19 executing program 5: 06:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:19 executing program 4: 06:42:19 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000001c0)={0x5, "4f6921cc1da3971a977826f44988b62a51aec63c8e7324c91ce298be613c7feb", 0x400, 0x937, 0x40, 0x4, 0x4}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="0800f9e5565d36810000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf250200000008003900010000800a000900aaaaaaaaaaaa0000"], 0x28}}, 0x10) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005000a0000000000"], 0x44}}, 0x0) sendto$packet(r1, &(0x7f0000000580)="9d0b105bbcc2ee38d16624090bedd48bd0b231ca6dec25b574eab013d6e30aacc21279e5354361347383b4251d9b2efa4ea794cc1410", 0x36, 0x20004000, &(0x7f00000005c0)={0x11, 0x18, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower`ir=./file0']) r3 = accept$ax25(r1, &(0x7f0000000440)={{0x3, @bcast}, [@default, @null, @rose, @default, @bcast, @remote, @remote, @bcast]}, &(0x7f00000003c0)=0x48) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'veth1\x00', &(0x7f00000004c0)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:19 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) wait4(0xffffffffffffffff, &(0x7f0000000200), 0x2, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3f, 0x1000, 0x7ff, 0x2, 0x8}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x7, 0x7fff, 0x0, 0xa05, 0xfff}, 0x14) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:42:19 executing program 5: 06:42:19 executing program 4: 06:42:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:19 executing program 5: 06:42:19 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) fcntl$setsig(r0, 0xa, 0x39) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r0, &(0x7f00000021c0)={0x60, 0xfffffffffffffffe, r2, {{0x7, 0xd76, 0x10000, 0x5, 0x1, 0x8000, 0x6d, 0xfff}}}, 0x60) [ 353.911455] overlayfs: unrecognized mount option "lower`ir=./file0" or missing value 06:42:19 executing program 4: 06:42:19 executing program 5: 06:42:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 354.015617] overlayfs: unrecognized mount option "lower`ir=./file0" or missing value 06:42:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000180)={0x0, &(0x7f00000000c0)="76b2d28308d08679912ec363fdc0b38aa19a50de77ade37b0d65d1f52da7d0a93eecdb08a0f2a80d16b71b3c334f0d61578fc71fb1dee140c42fa2e0f704c6e74000ac22b85f475c18f7200d78d7ea375d7fa0e2f7021d24a8ba05428f54d845eef68cb6088c2bfad098", 0x6a}) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = open(&(0x7f00000036c0)='./file2\x00', 0x420100, 0x62) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:19 executing program 4: 06:42:19 executing program 5: 06:42:19 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100)="5ac7f87f", &(0x7f0000000180)=""/136}, 0x20) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) getpeername$ax25(r2, &(0x7f00000002c0)={{}, [@bcast, @netrom, @netrom, @rose, @netrom, @netrom, @null, @bcast]}, &(0x7f0000000340)=0x48) 06:42:19 executing program 4: 06:42:19 executing program 5: 06:42:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:19 executing program 4: 06:42:20 executing program 5: 06:42:20 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000002c0)={0x1f, "110e8cd9f4cae1c1c9701590038b98f810b2e4057274635239b420a10ce87fcd", 0x4, 0x10, 0x9, 0x4, 0xd5c6ecded4f9754c, 0x6, 0x8, 0x62fb}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="fe41c9b9efd7db922018fa4888ac30d3070e07661bde179ce6e502c447055a2e95293d60f9d5e8706cd595da958bf1aa822806876a2661fe182076c61f4023556dce15aad00609a93de381f83588a2433739585c74a40ee5e1d4624cfe97eb82a2130e36b06b9bc7971edd09e455bb7e183915111cea3dc70f21f8d01bbba6d8a9e31b9eeff9e8009a4d45e23d2e1c960174b3ac5cad646f91dc6134200257928a3df2814d245e3aecf45826efdceac9114b86318ad9be", @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESDEC=r0], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) 06:42:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:20 executing program 4: 06:42:20 executing program 5: [ 354.500447] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:20 executing program 4: 06:42:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:20 executing program 5: 06:42:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:20 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_dccp_int(r3, 0x21, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff8488, 0x48}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40085}, 0x20000004) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) [ 354.699480] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:20 executing program 4: 06:42:20 executing program 5: 06:42:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 354.980809] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.147189] overlayfs: filesystem on './bus' not supported as upperdir 06:42:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:20 executing program 4: 06:42:20 executing program 5: 06:42:20 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r2 = accept4(r1, &(0x7f0000000180)=@ax25={{0x3, @null}, [@bcast, @remote, @null, @default, @default, @netrom, @default, @null]}, &(0x7f0000000100)=0x80, 0x80800) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x8, 0x1000, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x39, 0x0, 0x0, 0x0, "f666ce7c4cab146e2da1562362b787e371b91d43d06540e6770945fd12cc18b4bd803b9135008263a4d4b3ecb2ab366bfaa8dba55b9f261d91cf15b69680a594"}}, 0x80}, 0x1, 0x0, 0x0, 0x8805}, 0x40000d4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:20 executing program 4: [ 355.296892] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.324493] kauditd_printk_skb: 50 callbacks suppressed 06:42:21 executing program 5: 06:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 355.324508] audit: type=1804 audit(1603176140.960:546): pid=18006 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/388/bus" dev="sda1" ino=16050 res=1 06:42:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:21 executing program 4: 06:42:21 executing program 5: [ 355.445685] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.501263] audit: type=1804 audit(1603176141.020:547): pid=18006 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/388/bus" dev="sda1" ino=16050 res=1 06:42:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x10f) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:21 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000100)={0x0, 0xffff}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) 06:42:21 executing program 4: 06:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:21 executing program 5: [ 355.603848] audit: type=1804 audit(1603176141.030:548): pid=18016 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/388/bus" dev="sda1" ino=16050 res=1 06:42:21 executing program 4: 06:42:21 executing program 5: [ 355.662445] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.681270] audit: type=1804 audit(1603176141.040:549): pid=18006 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/388/bus" dev="sda1" ino=16050 res=1 06:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 355.850735] audit: type=1804 audit(1603176141.430:550): pid=18038 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/389/bus" dev="sda1" ino=15919 res=1 06:42:21 executing program 4: [ 355.938464] Bluetooth: hci5: command 0x0406 tx timeout 06:42:21 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000}, 0x0, 0x0, r2, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000100), 0x4) [ 356.005377] audit: type=1804 audit(1603176141.430:551): pid=18038 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/389/bus" dev="sda1" ino=15919 res=1 [ 356.128296] audit: type=1804 audit(1603176141.450:552): pid=18047 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/389/bus" dev="sda1" ino=15919 res=1 [ 356.162819] audit: type=1804 audit(1603176141.450:553): pid=18047 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/389/bus" dev="sda1" ino=15919 res=1 [ 356.248927] audit: type=1804 audit(1603176141.890:554): pid=18069 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/390/bus" dev="sda1" ino=15976 res=1 [ 356.316426] audit: type=1804 audit(1603176141.920:555): pid=18061 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/390/bus" dev="sda1" ino=15976 res=1 06:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:22 executing program 5: 06:42:22 executing program 4: 06:42:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:22 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="c48ac4515dd0f10894cebfd26ea4308fda6fac46ec288ef27e8d15edb014bb522cf9ea94f45e8b5259", 0x29}, {&(0x7f0000000180)="08f15114ec89713909345b718b1c22e1231cf6fc439bf3b9f9573948b2dea66790aba95c8532297773c02e134dc350ede273050e8f4551d110077620ac54d98343b0cd0a5850b6e8aea1db22c1b289c76c14a498f4cf01449ebbb757b69dd41493a845c28a52d12375c4e7f7adaf8af5236a2f52844e50100fedbae57d7b86619021192cc79af898ce475ba299d5b0c3eb93e937464d157751947e051d754631d258aa31fca096d1e3188976f6b2aef1ec74efc6e907f4c242d6a4eb994211b6314b1d5d99cf", 0xc6}, {&(0x7f0000000280)="afdbfe68d4fe4cd701de9ded04aca7c7689d892df3389be7e4725bdc4824c264f7c00e1d76fe9970685cc631e96f2b83231ff95abd26d9ab9485f59951b3c9c69a88233e4fe0815a1bbf04a69fa599042b70f5a2eefbe65e16e192c12f072705751316deb6cb583ed2d2ba67ffca1606c62a4153fe8a4888ea0d3f98b99bb7adeee1331bc7f75ecb4f789b73e425ee0a6d2c5097552159766bc039bc678e24a5306b", 0xa2}, {&(0x7f0000000340)="6d2c016631e88d37100265998959c1b9bb14b4dcc45c503eb9f26fc1cba83fa97b888920cf38a02a12726a9a4b832265450d455aba26e20d0fad0a93fcdbe29ab030b0c5e78cf02b895297905e76032f24b3808a1f774e968f4451c29756b7cd114752e4fbe62c91fb658e88aca8424ec18d1f7c4149970dc46b707dd4af90e3a065d5f64ebce7733a", 0x89}, {&(0x7f0000000400)="a6bc4c6627e32bbfb5617f40b568dcc3b199303ccb083d03420e6df2dcd7a440cf22481b1bbe0dd5aca4f278f54a4dc9cd2414d403d3580f40a51d858164f8f67ea7e59e8839fc6f62ac2a1346b73f94b8a9ce68ec3a5d433d3a39834d901539403ba1da8dff4f1c646524e51e2e2365dfb86cba3744756d6804d5af21877bde781de9faf1fed8abc3b71ab6af83c293acd61d11a79e87b9", 0x98}, {&(0x7f00000004c0)="a210caf9e6e278fc192cbf39572a28895613c11446bc0d35ab2cb122eaf2aff5e452ae69c2ebb378b7ae44d9f68771dfc24eff177e880c258d25471dafdda3c59ea79e320ba815d13d2fa1686b10c380252acaace92a467ef312ac2008b38797ad8415ffee83f124d71472be7f274b5d7e441e33780e9d6efa5813571b859f687403f83f81af4bdb41f3fd545a61dcde00f67f867f3e37f74767f2c0ec7299a89f20", 0xa2}], 0x6, 0x7fffffff, 0x33a, 0xa) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RAUTH(r1, &(0x7f0000000600)={0x14, 0x67, 0x2, {0x1}}, 0x14) 06:42:22 executing program 5: 06:42:22 executing program 4: 06:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:22 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x428101, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:22 executing program 5: 06:42:22 executing program 4: 06:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:22 executing program 4: 06:42:22 executing program 5: [ 357.096821] overlayfs: filesystem on './bus' not supported as upperdir 06:42:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:23 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) llistxattr(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000180)=""/171, 0xab) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:23 executing program 5: 06:42:23 executing program 4: 06:42:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d14d9d7c2dafaf2146812442e2f6275732c776f726b646972002e2f66696c65312c392e2f6669"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:23 executing program 4: 06:42:23 executing program 5: [ 357.435510] nla_parse: 4 callbacks suppressed [ 357.435521] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:23 executing program 4: 06:42:23 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) bind$isdn_base(r1, &(0x7f0000000180)={0x22, 0x72, 0x3, 0x8c, 0x20}, 0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) sync_file_range(r2, 0x8, 0x1, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x600480, 0x0) 06:42:23 executing program 5: [ 357.735738] overlayfs: unrecognized mount option "workdir" or missing value [ 357.750147] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.816236] overlayfs: unrecognized mount option "workdir" or missing value 06:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:23 executing program 5: 06:42:23 executing program 4: 06:42:23 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000002540)={0x3, @bcast, r1}) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000180)='./bus\x00', 0x7, 0x5, &(0x7f00000023c0)=[{&(0x7f00000001c0)="b36d7b4f1685ea5d9ceb26f487051bd25ea822035ee79fa6aa660ac99690ee4698a1a9e9ad76325868e877e0dd0d7d368d30ea4bfd011bd7be198f32d64c24b6ad9baf2f54b32a47ae41eac4719cf633f16193d5a6f00ec64f991e0e7edc5152c77661", 0x63, 0x33ad}, {&(0x7f0000000240)="f7391abb091d168f3096cd4bfd5b2450b5ef31529a0c97c3e282d08693f0347a8d5c7a173727d80f91caf295770341ca4c33da7273043398b16c210dae63b89cda5f60dd7da6fd2a5cd6fffce5dda3029d42d0581171dd08a91f5369842d7dae5effaa646ce38cee5a8af28387485d52c6f89b09525fed68b5a6077866790cb63b5c32b6845aa2b72aeb85c56f7988fd821e6292d03e1b2e4fa461cb7f3d27ffdb55c35b2e201a5c59e474d3c79f898c99254a091c4118c0f280ef08444398c6493a6fb67f0132e1df8f44d2e84d4fabdc706b2007088c6aa0482b4ee8730efe127605879c075469ef46bfb6140fc6efd28d95d30788970dcaa2b15ebe9fcb7043aa1805b8f4cab809105be8f01e0a38da73d179da044b777e14411ab1f25c5a221bacb9cbcb9fc98cb349ba9493ae18cc16eb22d5c4878f7e200f5c2b6c2fd516c357d4deee2015a7440b87c0511a7c85e588745f71a308eda50c040efc32bcc95d54b250bf83e86b1e970751f3c4ec210cecb1a5952543ac36eec59e0a37672c588348b321060f4a35a33849e733f2f1897758d5c097c8a71913d6ab66d065cb9bdad187a76100aafe2a4a9788b8cd041ddd402193a26f945064f6f164d654d97563d6b878f5496f322f840c13b105b768c9e398f36b742adc5f2bc0f1061de4cbe92d56ddcec5363c572bdc9f2ff361c6e481d6b38d3fc78c32e6aa9c14e1c23135b8d7657037b47408bb28542fbab7db4bc2ee666bfd1172f9d2c9cd2c886f67a3bbc5d805674e3d2dd14c873e8010d0b75ce91f7ec9113bf4337f062fa44bbe777ef87bb49556ceba2d6ba9488127dd3ab89b96e76aa2d486d1627ed412b6a0a092917501d39ebbf1095f334ce7acfab0eebfe782656a3ca42bf7866d52489b2423d87da5b70e9ecc65c9e0d5839a06cbf74de6b9b87c6b42529b02830e515166f4fed3eaf39ea616f9b44f696ea79cf3ec4265b00b20fd68ae78153717cdaf814a23ad81fcfa87d3eb3f4eb69d4c747fb636a6e1abf077ab96fd19c9ec62e91f4d3e3aaa955fb0a1cfa449ee883c475eb96c720c1d6a9708d668039f0b48252112a1f10fe7243c60f9853429ae060c3b51f9ef2662b8a37d4dffc11b79f52691cbc321474a8c5644e120197909f9da88aac45143a6af798b16445a8651f6155854643e896e10d0f1084245f50232e1917f0790887e38072d79cd371a8c2b40e2f3ad664ff17bfdbc76ef6db6ae86881a7b97ddec7fe8e0d5a2fbbb8d6e0358b47bb95eb10f18b3f739bea59e3a6833bdf9e7600c24d71dfaf7d2f9b6eb47f2dba9e56efc61fd87f303a3b67e08f3dac5c665a2dbd799aaaa24f5e60c32cbfb4e43abc54d1c29b804baa13d015824b96127e049f12e33e84c72f676b6e3f6d0bd32d73db62ce093b0f47d310bba76d942f50ed50352af73874d3575aeba231718e661cd72b61c94e2a05f21d0a328266642a64461a4378833515e5b8802236ae3f3caef389595e7288a61b0c6d3e1bf0a2abe2e957227ec8105d327375dd4e208de8892177ae207a468b6744ee817da962e07f17d51fb42b79ca55726b834679968e577c73df241c355cefcf1d1677702d1591863606474d085441cf625162944df549d443bbd16b1222a3a3c9d3fbab59e9b3828c24a0ce7763fee4ae9f8e0b1b6749cf663f2924a65a11b7addc881ab7640cdd89e358358568177c935a8946d573b67767a928ab40a5742cdb82d7be90d2b2e2bb858cde4fb400f8f49f348dc39a48501ffccff4e1652cbfa51e9c1c80a1991f5339823e54cf7003f5d0cddcd41c8f8c9a2f8c56d3b9d9ee3555617035a4b11d993b384435ab596399e53aa708af027415c2b0b7472a015f9d577a221199aac9a290d417e26a32b9d28bc010d486569c4f522c8bb264fc1af73a4329c745094b08212eade0d6c557f960e39ec382017d8a18d5b3c3cd1ce052dc46fb993570bda7fe16f8ec216e976e7f8f943c6f3a063f0b6a956f09fbe25efff9ed408319743f3b4492df67db18b32b3970f19dc25a638933c1529bc35f17ccb895fb946fd1a2e6a1f0b189cbca7a61eab7458dd8fbf539bf2fa48c437264fbec20f043528e75e5b682db0c6e5b1d011e1f7a36bdc3d436c5007a3a1de4af87cb041c49ab1a9d91cc6f7210f08b64143c56bae7815f3f2ba8b27890275093237d2a333e3a4d0624da3e96321a9d1af51a55aaf20992d024cb73ee598b6ee5d57b4d150d3e2557445787d6ae956f8efa634d5f85650d87bbcbd36fb57afe61301fff61b1e69bb7368aa16f09cfd7bd38bbc18fd42c34bcd17f48a3d2f3df9a8bc747c927d82bb102ac0ac9b9859d12898a863848290a1706709f9ef73dcbc57a6032401f589128adc38af2917d61bfad1077d5c9b491126fb58b2e36acb99a30d4ac6160a5a76a27b4ad9bb81e2ed25e464f245300d3a0d702e75d9148e8e0e1d217dcd7041f023c86b783f65ba5d3c7802a264a17963a4750c8a58ea0282f08bc67f93db939e885053c74692ecc842d92e67b66190149c6b672c983c89e67fc2ef3cab7b51b4287613e2a801ccabb2c7a429df9a591e62ed01ae41a5ef61fe2b3bb285de4b5286d030b37ef42700e1a633ee76d6d4e12274948ed036e3a8e2b06e3fef8a4c83709fa2092dfc960cf2f1cf40be13e70bb438d6e5b38f8053d2ea8f17640e1b57fe515a4f40d368db4c532dfe6cbabfdee71b9e324db0922f48cbb9c1fd301db9aeb1e52f9d1a10057959b34c8a6bb97e3553975ffeeac74ac02d6d7ccef14ccb2310d9661e39ea61a7dcfa83e62de3fb03fdb787aa8a8610b2959ef849510b8d1c7dfff18bc28a75860861e7716ed431a7cc1e5c17fd8aa95ddb4d0bd4fbe56d18eea2030809763536879adf5cb882cc32c4657d837b836993cc39e7adb37bbf7fbb767fc954e330052b3647193b3ba44f1b705ca6e0271b6975d6a95f0882b879cb1bb1742657c072e023de1e621c8fbed6d7d3555d3e207d92e7f888287fadfee96bb59ed9ed24eca71b1cb7047d3e3efcc62c0ca305c944c494032362e34a58572239075c612fa477453f38fe3c1da3b6903fe7f7c2c63200247dd14f1033246099081ba4a881d57da1b2174d0999766ce7e1864c002406784fcf6af3262de7df6988fcfb669bd57d466bbe923c19e2189b16955b32921e1c588c0068e9f426c3aa5220035bafa85af8237bd9f27cf42577ee64687fe21c892d62ddfa815e0de07b4774ed19857b6558aaa61d0d0b6970a0866dd3a31a43814eb1eab62f24477d9d21fe6668a94ef8be7e18bbee892fad304f9458e2f24e26a904b85a2b5e6dbb93afc1613d64946c173a4bd96b262d8656739c77a9474b395fb6bab201a4df119d1d65412581f9acf99e59183c1b18661603f128c06ce6dbe3c79808b8a6b551de6f2dd84eb790e9ee749e7d8146375a0663dff7be5f5bdf2acb1d8450c3eed3690f340ef7a36c66ee9b53a63032a7b8ef6a3ffe4c8b3243bc903c64d17938197614de1d59f315d5b80ee252fedb66bdc51d187c4e39856495ab7ad9e93b6b3c67dbeafe377fe54b1ac547c047d110c4f6f703b233a47b611bf6539893a02dda551409746df83bd0d6b7ce9679b7b1a53f7a323b38dab2e9e1269cf3e8301c42d7bec057354bf63d0434decdb23222ff0447ab84761a3eecf008cf24490a062e9ebc121fcd69faaf0e1a738c8cd32b8b18abad4c0b9a3fe277eb3630478314d0895e7d13addfcfe618bb6f3d7e3368458e2199e9aab84e3294a751d5d7bcd78fe6df58d558c5981d22fd02d3ad08c125ae854f54f4b82c67924d7c2035fb11520c7b8936b7313f7ebe492d39130e9ac6a7be6c722f7535545f76c3d3542f1c136e8d432c2339324e607494baa20f76ff4582b7e4e69db7aad9dc71c69c573288f7cd7a79acf3b1cba3cda9b6f78cf1fb7c4ed3acc469800ac9ec1457f36b32a9cd129bac3308221c1333445d31090d15bcdc610a9973708b9f40aaf4c460961b2e3b7599d60d57f9549fb8d80dca48b8586c1af3ea53674fc9059dc8c1d8f6cc52244b06341f74370f6be2c2a03d307e1d03249202eaf32711eb14f4ea9ab3a7d38c99c6d186ff988c1e09433cb0f4b556f731202df0611d9702729e61c6b006668c870192f8b10db1ac63405f076908df7a373bc7a6ec4122db572e311ac455d56fe68db9882444a1de26e746628167c6a8f3337d036a9f3578fb2edef32038e40dff92f429212ff2b88fffef6d9532175fb504990a141615f87c4d615761556e725b069c7686a51e7759f20dd4b138ebd6c438d908d2db96c151fa7ae6605a0bb05dcb4f31d06ea51d93458a9b2421140c11e837664cdeac509715d76a23832a9af9bafdaf4929998292a9cf2a1e5c3846b8c4d35c72eda4ce79a2147807af93436a5172cf9f821511c5e49ad19cedc455d77eabaf80902e63037562ce1885922777928a3ebac9dfdf828eab9c3ff32106c8d1a08470e1bf2811f17458f2cb73164e676b242d655276d024d183c6b54e1211fd1cd1e5a11581d1ac4a653608c4f29a05a4c255fb5c9567e3015da6dc0082bcf128f86a9b30d80f6d6b5b320bc643bca0134dea835ba4b57a624739ae597df6aa4b425cb6d6448e67bcc7fc7c116f350ec93128371318cc2a56227d0fdabec750bec8dd19f29a978eed1f27bdb3750c7c6a19869024c4fb650914ac081977238c4085862fe568f1e775a6ae92af5839342169b4ac53410b3a244d696806e27edf58b45923060a492f0102b3162ab2c065b7842716ba4d85702f057483fe67ef2fbbf2da696e2968b950cc7b6aff5f010b87cdcc94c372c0357f70e3d461f4311105fbca5a0a89d447ef42b76d2f97a09edef87dc58078011ebcbc104b388e0a38bbd373f76bef3f91fdc75018d99919461d9009f40cf84371ea7ae3530be9849df098ea67e77189527db5047a6999498e782791f7ba391b4b1d60108902f764e991746b8185cd431740124da03be07e89a3fc500e623984ed6e25cfdcf749abfcb4b6734a126a47fe451a77537fc14b80d8e30d7ff71982def16f87ed66a6a98a80d4b8bb0920f2d958294c9015190a17b662b578e87468e0540bd8c6f2655cd23f3580caa5d08f6c9286a2d8db62e81a56df5a789a5ffd5603b23b9eeceeeb996d8a5fbed70c4800578f607f345b323f608b617f86026ff35574ee8f7711483971d3ac79e55a8897a0a2f30d6f5aaf2fc04f2564dd9d33a4720d9ef0b4e75c73fb51e52194fa1a1597c46ca48ea3e07c085a55880831d4d9639ab4146eb118c4f69e203758106da63f0200767a837b0fdbab61c9476aff35eebda82681316ae912e908501fcb2b90a4102c84a0515ed00dbfdabdf855f2149b06c79bb24dde9a5a889d658f33e6ce53a42e94ce914f4fbe09b1cfe0794e485bebf778d53bb27379437f3e570687ee3a237a4d302247bcd76a581460bf9a552192d8a60d0cc3555a12188cbc76dc24a85187ea3527732604676d93e271fae58f0f957c97a2b2a7e334f84d1331eeea752a70ef14f96b55b2f31b8482d272511403987af757e872c5e6bb47e877e9e59a04069ee7b04669a32580ffbaf095ade50a0bfaefee3a07e41a722b6e26cc34a72524c8a3744d14f82367a06f196b491b0b486a0b7ed29b6fe3c4c4b271ea25a6df04b47470bc9f91c232e4a91846ed1623d7616aac94810ba5056b531bb1ee77a62bd7be21d049e28fae89c821eae84cb55b6412aa8a19a381b645ad37e7efdceb1fa135cb93fb2b637d", 0x1000, 0x3a8e3e5a}, {&(0x7f0000001240)="2f3fe7a97099406acbccfe606660111fc92b9b0a3b39787352a44f4aad7d44940cd93043ebdee1a3d6db676e3213878c956651aa207bc641644a4a782d7e33e12327dc77b27ffe2a6f3f000763143de2228b", 0x52, 0x1}, {&(0x7f00000012c0)="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", 0x1000, 0x8}, {&(0x7f00000022c0)="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", 0xff, 0x65c}], 0x20, &(0x7f0000002440)={[{@uni_xlateno='uni_xlate=0'}, {@shortname_mixed='shortname=mixed'}, {@shortname_win95='shortname=win95'}, {@shortname_mixed='shortname=mixed'}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no='utf8=0'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7ff}}, {@hash='hash'}, {@smackfsdef={'smackfsdef', 0x3d, '\\}&'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) 06:42:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="757070657264693aab822c94b5efe367db8c723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c6530f9f041c8200b49a567a66349cff7974513bdfc6c2d76387e580cd503f8f6e50a7edd852fa7ce5db69c525202c0bd6613a4a13277571a2183e3147a484b5e3474344303a31378c949cd1a629956f94270d50b4975135d9ad2de88443f6647a9c8824e67bf"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 358.295747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:24 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x410801, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000003d40)={&(0x7f0000003c80), 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x2c, 0x0, 0x8, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x8}]}, 0x2c}}, 0x8050) syz_genetlink_get_family_id$ethtool(&(0x7f0000003dc0)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={0x0}}, 0x0) 06:42:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 06:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 358.460178] overlayfs: unrecognized mount option "upperdi:Ť‚" or missing value 06:42:24 executing program 4: 06:42:24 executing program 4: [ 358.557672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.568169] overlayfs: unrecognized mount option "upperdi:Ť‚" or missing value 06:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:24 executing program 5: 06:42:24 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11033643}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7470ba0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c10d8ed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd3c1724}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f50a510}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x400c880) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) 06:42:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r2 = dup2(r1, r0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000200)=0xfffffe00) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x705, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20040050) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:24 executing program 4: [ 358.774652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:24 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000002d80)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 06:42:24 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1ed9e6", 0x0, 0x0, 0x0, @private1, @private1}}}}, 0x0) 06:42:24 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x400000, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 359.259194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc20010}, 0xc, &(0x7f0000000100)={0x0, 0x58}}, 0x0) 06:42:25 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0xd, 0x4) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:25 executing program 5: r0 = socket(0x2, 0x3, 0x1) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 06:42:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 359.549851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:25 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x42, 0x0) 06:42:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="757070657264697b3d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c658e684a902d33cddf2c"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4c000) 06:42:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000100)) [ 359.962325] overlayfs: unrecognized mount option "upperdi{=./bus" or missing value 06:42:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:25 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@phonet, &(0x7f0000000100)=0x80, 0x800) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) 06:42:25 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1, @raw_data="3d723678e6f1a9b01d1e45933f98c1189f70c068deb2fdc964627b2cabcfe26e56d287dd5b975c8ec2e44872bc76a58ed8958a9776304a081994567386ae2e7ee3bc561572c64f3fc02d7aba38da4a9651914aab2b15c47f9d5a86bee57ba28085f56f3f8d0f667eebbedcc0bffd4d11a5b094af82e549f5f6b3b6d93dfa45b053cd61d9cecf0720b66ac824eb2744ba4b5b8b8c21d27329cecca9303dec1f11a35063e8e8b1c285e1f1e74dac00a7aa05a5cc1cdc745636288b40e1aea1dc0b437117258e93c19d"}) 06:42:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00'}) 06:42:25 executing program 2: shmget(0x3, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x8, 0x40, 0x1, 0x0, 0x3a, 0x1304, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f00000000c0), 0x1f}, 0x50488, 0x9a3, 0x9, 0x4, 0x1, 0x0, 0xf8a7}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 360.155491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c00)=""/4108, 0x100c}], 0x1}}], 0x1, 0x0, 0x0) 06:42:25 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) 06:42:26 executing program 3: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180)='NLBL_CIPSOv4\x00') r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000440)) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x190, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x414abd0f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32947d1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7aa9d3cf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ee33ee5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7018b11c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a6a5799}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5acddae7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63e3d980}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6462}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd45a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34dee9d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c67593c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7581df49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef3d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37e259f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dd242b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd30d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d480576}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe305}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c213124}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71b7b5fd}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56ca0c34}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71ec15d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7290ed37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb607}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d7c5178}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45ae6aa8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffc}]}, 0x190}, 0x1, 0x0, 0x0, 0x10000804}, 0x4000000) 06:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 06:42:26 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000005980)) [ 360.525927] kauditd_printk_skb: 38 callbacks suppressed [ 360.525942] audit: type=1804 audit(1603176146.160:594): pid=18343 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/400/bus" dev="sda1" ino=15959 res=1 [ 360.537669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.671279] audit: type=1804 audit(1603176146.310:595): pid=18343 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/400/bus" dev="sda1" ino=15959 res=1 06:42:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x20008811) 06:42:26 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x90b1, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x48) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 361.070727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:26 executing program 4: r0 = socket(0x15, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) 06:42:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d0000e4d8a70f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360fd566b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 361.110315] audit: type=1804 audit(1603176146.750:596): pid=18376 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/401/bus" dev="sda1" ino=16010 res=1 06:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 361.243096] audit: type=1804 audit(1603176146.800:597): pid=18376 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/401/bus" dev="sda1" ino=16010 res=1 06:42:26 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1800008, 0x1012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1b}, @val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044082}, 0x8000) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000100)) 06:42:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:27 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0xffffffffffffff00}, &(0x7f00000000c0)) [ 361.346506] audit: type=1804 audit(1603176146.810:598): pid=18391 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/401/bus" dev="sda1" ino=16010 res=1 [ 361.431649] kvm [18390]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0x56ab 06:42:27 executing program 4: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000340)=ANY=[], 0x19) [ 361.622176] audit: type=1804 audit(1603176146.810:599): pid=18376 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/401/bus" dev="sda1" ino=16010 res=1 06:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 361.761012] audit: type=1804 audit(1603176147.140:600): pid=18406 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/402/bus" dev="sda1" ino=16239 res=1 [ 361.786138] audit: type=1804 audit(1603176147.180:601): pid=18406 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/402/bus" dev="sda1" ino=16239 res=1 06:42:27 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/170}) [ 361.810255] audit: type=1804 audit(1603176147.220:602): pid=18418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/402/bus" dev="sda1" ino=16239 res=1 06:42:27 executing program 4: r0 = socket(0x2, 0x80a, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@bcast, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 06:42:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)) [ 361.949476] audit: type=1804 audit(1603176147.220:603): pid=18406 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/402/bus" dev="sda1" ino=16239 res=1 [ 361.967060] overlayfs: filesystem on './bus' not supported as upperdir 06:42:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f00000003c0)={&(0x7f00000002c0)=""/217, 0xd9}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0xc000}, 0x86c5d433c009e8f3) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x440080, 0x0) ftruncate(r1, 0xb80) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d0000e4d8a70f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360fd566b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:42:27 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20}, 0x20}}, 0x0) 06:42:27 executing program 3: setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:27 executing program 4: bind$phonet(0xffffffffffffffff, 0x0, 0x0) 06:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:28 executing program 4: r0 = socket(0x2, 0x6, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) [ 362.380633] kvm [18449]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0x56ab 06:42:28 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001180)='/dev/full\x00', 0x20000, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="68809b2e7d10"}, @NL80211_ATTR_SSID={0xc, 0x34, @random="799b34f06683a728"}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000041) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000100)={@fixed={[], 0x11}, 0x2}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000180)={{0x0, 0x3ff, 0x80000000, 0x0, 0x10001, 0x1ff, 0x7f, 0x0, 0xfff00000, 0x2, 0x20, 0x200, 0xffffffffffff7fff, 0x81, 0x1}}) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1b}, @val={0x8, 0x3, r5}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400002a2}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}}, 0x40) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r7 = accept4$ax25(r0, &(0x7f0000001300)={{0x3, @null}, [@netrom, @netrom, @null, @rose, @default, @rose, @bcast, @default]}, &(0x7f0000001380)=0x48, 0x180000) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000001400)={0x4, 0x18, [], 0x0, &(0x7f00000013c0)=[0x0, 0x0, 0x0]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r6, 0x0) 06:42:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 362.561844] nla_parse: 3 callbacks suppressed [ 362.561855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) [ 362.693896] overlayfs: filesystem on './bus' not supported as upperdir 06:42:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723dbd0b66696c65312c6c767765726469723d2e2f66696c6530"]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/81) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:28 executing program 4: r0 = socket(0x18, 0x0, 0x1) recvfrom$ax25(r0, 0x0, 0x31, 0x0, 0x0, 0xfe63) 06:42:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d0000e4d8a70f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360fd566b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:28 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) [ 362.935278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.016370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.042689] overlayfs: unrecognized mount option "lvwerdir=./file0" or missing value 06:42:28 executing program 4: syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x6, 0x0) 06:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 363.073953] kvm [18529]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0x56ab [ 363.148147] overlayfs: unrecognized mount option "lvwerdir=./file0" or missing value 06:42:28 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/dlm_plock\x00', 0x90200, 0x0) [ 363.212167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0xd, "0e49f432822d93b294239f74582d94ebea65"}, 0x14, 0x3) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdiR=./fir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x6, 0x3, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000002c0)="925eed1f2f650d0b7d06a0e44d696b2b6c63f5ea083b5d8f6a5320edbda529433b96e85b3b7b911d01f8fda24ef7c5dc284edf213e9a7d809d8b588db63dc55344542ad66e51bbbd82cc378878122115402a25d5212748e9e40b30981a73b18cebd7a6d88fead9599ebcddbf10026b3255e17b132ba00a0ad523bc132ef3b6096357a9f29edf3257a59988c16b6080b76bbbd6d30efcc083cfb5e4689ca8681132068532cde1ced18d128ec8a92a6a91f285718c40", 0xb5, 0x6}, {&(0x7f0000000380)="aeee4b9d386a8fc8b0dcd19f2723c28c53d63bd1ec04e13e0018d3655664e0b184bc4825f40c1daa19027166cf54042d4ad80dcd6640580e9a767b00d4a45ccedebdfb3a0f453afdf80ccb6bceea0634e90e4f1deea4614002", 0x59, 0x1f}], 0x0, &(0x7f00000014c0)={[{@barrier='barrier'}, {@nls={'nls', 0x3d, 'koi8-u'}}], [{@subj_type={'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fowner_gt={'fowner>', r2}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise='appraise'}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '\xf4*\'%'}}, {@dont_appraise='dont_appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/vcsu\x00'}}]}) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 363.327999] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.642072] hfsplus: unable to parse mount options [ 363.795145] overlayfs: unrecognized mount option "workdiR=./fir=./file0" or missing value [ 363.813068] hfsplus: unable to parse mount options 06:42:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:29 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x1, 0x0) write$vhost_msg(r0, 0x0, 0x0) 06:42:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d0000e4d8a70f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360fd566b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:42:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:29 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40a080, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000200)={0x65c, r2, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x170, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xff}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "5a7684eacc41"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xd5}, @NL80211_NAN_FUNC_SRF={0x124, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "d1b3a48b2a3fd0289fc9561d9b2532de8653e33c72a8b8dfbc34f8c2d4a7fcaae80fe78b71df29ad76f91592ad590180a16fe5e51916321379173617422e51555d6f547b5b45b1c3e2ea894f9c61a3570e9817530ebc70ebeb245bf6993fa2aa16d821f36ac73c8bb9d45348ed99832cf6398db347e98d7b388fa64311a82905cb3ae18cb6b755594456a153bbcf1910a8291fe58f71683a76ed35751385b8fe0fe66885e93a1c3e951a74cd3cce51ac8839cb8274389af4813626e42afd5d4f5bb75abc4268a1b38336c1f4a5f6f4d96b78d9883dfe7c2dafac6d2577b7188cc8080cabad34435e4fec5ba48ee76e382b1fa178bfbe315bf087589848d509"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x3c4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8d6}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4cdc905b6ef3"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3a4, 0xd, 0x0, 0x1, [{0x84, 0x0, "3a172a42bc7cd21084c7e7c6c379a452b5474c4f2d45199103e769c95c6314cca65d573ff8eab47d176483d3e678c4050f057e8e98d9974f269383c2ab8ee530dbc9a6fe6a50d2e2934e7f775a470f3e42324ff32ca2a75728194518a3fe5acbc3be4d917d9d2811e8c2ba440e8934baf2380ae293fdbbb3c47f6c3325d21f1c"}, {0x6a, 0x0, "91c67627d5d4b7ce2c86980cadb03e7f8ca7f695755e31223738449af3f3609c18a19d65e19a41f6decac7a760f1b082820e3c5bf3e403215c3a17f3467f8e96a204689ecc19abcf6c8df4db2591286254967bb3921e6b3f846b280a5fe8bc56386837e7788b"}, {0x16, 0x0, "c89f738163037ef6172d9be329ba7da9825c"}, {0xd4, 0x0, "2c9692da6ac9b83a2b5fc06a0e7e2e258bf041fbe0899820a1fd9e5733db9f24423f7ae07e5b0abd154c47cd3d241100e690907bbaeb28a7155b6c74d30af41e4813087d0c1248ef8888e962be51790d42cd7f72da6ef386b2e8580b70e6976ae3e3e2ed99609197ddf7b9f8db44c586b58c2151608820325ec0bd73eb6e4ab4100d09d60d86e0a2392dc77f732bf6032eb19dc20a2ce1b13e961b9418c469c7c3352a90d2fe5e0589f1222cbfe210503b92e618c12521db281702184c6dc4eaafefde2aa5f8c7522ef15fbf5816d3a0"}, {0x8b, 0x0, "d04623a680a32e9ed40f88d9da037e7910cd6cd960367e8a3516f79992d7ffe39d12d1f1e9901aa63c15c2356d1e48b379516a08db851709958637940a738801791f97e12be6a0a449845dccde1ac972db4983eacaa2c304e032ce089d2effdb6a1ee29ed2d6b9b29bc30b4dc5177f0c82b2f9321d10b951646562115927b49a210bc829a0b32c"}, {0x96, 0x0, "0ab545365313453bfa35a838b600296ecb4cab4afc755d3d3b4ff9f1c5f8429d1a0ff437d84c2641643f4b0cc40699daa490cb819b6b117d02d3c5eac3fed8967d31151d513b20f471e60fc1bb6cc1efdc7a4334d15829c9483eb3aa5c0b2139fd4c2a274b5adccd6121e5ab492878af2f5b114f7818e4718544a626eadd4ac7566a0447b357df305331e2ae2a7b051d4f38"}, {0x16, 0x0, "06cc54961aa2d7b35c7b2d18f6c268d97951"}, {0x4f, 0x0, "511d2951226910b4685d4f5b13aeab9aefd661241e576d06137306bc0f02f8df00105ffc8609f746728d49b25e193c4869b5802833c9d75130ab3e46571db519ba237b61fba9c6ff5c7c8f"}, {0x38, 0x0, "91f9a433917d535c3628ea0bc1aa4c60b07ad30595cecf74b443d9516983d7da4368e8abcb0755b98ba985088c1d03c6dfd22e95"}]}]}, @NL80211_ATTR_NAN_FUNC={0xf4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe6, 0xb, "219cdec98af3996764921763d141a616f00b8311d7ee094c7d57f5582550a4d1ca13a4c569352183401af86fe3c1ad5a4facb2477db99d8bd40c54f5fd3985b9066898301a51113905b7d11ced0cfc64197431296596754ce84aa717f23e3a48df0b32ffb6d10329f914792bf313464293ef3e179d91f07c6926ae6213fa41fc53f71a3062e35abd0eb42a824b1b8524dbabef9e91ac9417345ae31180b9da13dd7696d7631fd3c3c73c943033e2fc8d800cd1dba9421a3c59ec9432784e2741c31574fb30073801a7e1001790c99b6c2c340a9ceb3d610f8aaf0b2eaa2d8e949d78"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}]}, 0x65c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44018) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:42:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="75707065726469723d2e2f627e627b00c24482472708cdac956fa473d4ff85727408696469723d2e2f85696c65300000000000000000000000000000007b9d2826325e00c509e1b29ce4e1a8ea5633feca2e7215f5466bf1def0c1a65ea24a5f5401fa308c3a19350caed1ec70c47d74da0a451112d3732b0e1c145587ebff"]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 364.018020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:29 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) read$snapshot(r0, &(0x7f0000000140)=""/225, 0xe1) [ 364.092303] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.135885] overlayfs: missing 'lowerdir' [ 364.156881] kvm [18827]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0x56ab 06:42:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:29 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 364.240333] overlayfs: missing 'lowerdir' 06:42:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1020000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x84200, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\'}\x00') socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="757070657264697258c1ee3b75732c776f6b6469723d2e2f667a6c65212c6c6f7765726469723d2e2b66696c653000"]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000180)='\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x2, 0x2}]}, 0xc, 0x11aedae6f071ff21) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 364.314256] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000100)) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 364.427530] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:30 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x2401, 0x0) socket(0x15, 0x0, 0x0) 06:42:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 364.560700] overlayfs: unrecognized mount option "upperdirXÁî;us" or missing value 06:42:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000000, 0x10, r0, 0x10000010) creat(&(0x7f0000000040)='./bus\x00', 0x4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 364.620287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.652362] overlayfs: unrecognized mount option "upperdirXÁî;us" or missing value 06:42:30 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x14414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4000, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x1) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) getpriority(0x2, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x18, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8040) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3ff, 0x1, 0x884}, &(0x7f0000000180)=0x10) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) set_tid_address(&(0x7f0000000480)) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x200}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) close(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x800, 0x8, [], 0x1, &(0x7f0000000100)=[0x0]}) 06:42:30 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) 06:42:30 executing program 5: r0 = socket(0x2, 0x3, 0x7) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:42:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file1\x00', 0xd4, 0x6, &(0x7f00000014c0)=[{&(0x7f00000002c0)="40e6a7ac0e332a4cf58b550cf6322657d98681513f409ccc4c33450a705f95bb16c3c347a9700a19dd4437487138322e8abd645a0505c6fe313b4129a816502834e3db06a5b660f1a703186878e7463903c020c40736be5a29fb62b60b378d47a8132355e7a48ba711da93e2d837667bb484f8b6771996c28757839c9664838bbaa6fea8aebc2dec3752c2672024acb36e19b7e7b39b8e3587fe30dee88405c0e95a09e2a4e8ef6022e6cd9b2853efc804b3861551d1db82fcfdb17bdbe2df50f45cd44ea422943b1831cd755096a7a5560bd532bef0d007948d29b8857c6cd6364b6f840513458ea57bc3b850ab28d37ad196", 0xf3, 0x9}, {&(0x7f0000000180)="1bcfc1dcb70ff350981fe7b9549a66f21085ba10a069c1ba601b931eeb4b7635e68f99c24758cdbb5f905567bcadae94365d96e1f85c0897bbf84d0affe7cdf110370ace906f15a813cd2cbbf72c22aa70992005a2365f6e54038fa7d94f3a4e336c073ce93a43e114eeac458107766e76ce6dcf7022863889", 0x79, 0x6961556b}, {&(0x7f0000000200)="f857c5560ef6a86ba50dd2ce0c5523", 0xf, 0x3}, {&(0x7f0000000440)="467ee444bdda2f8ec858e6368a8e6823366658f668d9d98b339957286a5291ce5df5c2fdfa0380bf137c8548113e393062e6dc6e376bde85aff05dcfc46c17146ed20ab102569fbf4cef1b721c56ffc5bf6e9515354539a6d2c069102f3b61cc9e871129252d", 0x66, 0x5}, {&(0x7f00000003c0)="4bf8eddb587f6791f854e7cf", 0xc}, {&(0x7f00000004c0)="e847b5db014dad91b17db344f57f730b1b7eaaa752a9519de1877414b31b9c14e9734a628bb23e45c90d398a80ae1c14fb0a5e43176724979dcbda99ae2bf449ab7e0eadf35947aa7bf8e31c061b6336baf3cfda8f5b2a9e2e94c2c1c532542e4911cd3abb78e72d028b86e64a803230e4984090cadb9e7d933e83142ab014fb6f6ad74814f7b56c731399057991fc1da7708b47d642a7760f91eaf6aa536f5af4c182f1cb8fe4c3c0e1ff3c8da77873e89dd4d88de559f77af839cc0af5b14af9a864c6ba0774ea327c1875c214c6d09cbf4203c4bdbfe4f9a28a8bd33db3604da41d136623222ad881536b391d06b58ee8340ff3c8fecf0552f16d936049beb6da7b6443732fc9ae2aca91749bd2da92245fe6a9769d433957d4bf1a273e63db221238d00b2ece09b8bebf843821af5a7819c5254402e96e9c870a202363f3b40a23d85fe729014eadbf2a31ce12ae9e45e500bd7913574ae5b99d7d21af8221056904c11ef4ede686617e205588bcebf7c06271180ec8255e941ea242cd3d30cb6531a001e66d0d02542b28f7ddd0f39b8c82b8ad17ba0faa73085a7c21a3f7f6aada7b4249e46049d5cb0b99ffb4dbfc38f06899fcb433e36737c54d81f7d634306705d24669efd2bd8fdb009d1cef067b32d2102b5f505419a2cb295b44b4e07d1c32538618cb2f2c18f3f6731ab9440cf6ecf256bb8101eca5fc077bfb788ce23790b3db7a554d6430a7c4c3309b2511e643c92320277def37a8880aa5e54326b58569c38c5fac732abedfe7acf9f058577277deef381ae7fa2150d7a8c1839d469ca2598cd628a9d3020efebb721b9c1c2c46b604d8824d0c59e9ccfaf55321e64d6a0bc5d5fe29af1df02dca00ccacbcad13bcd6745a9b159abc6a722f35594c14af5ed7d65ee814cdbf56c8478f0f7d99c4988438e79b02561d41884e024880dbff5793b3f2c77923bdb3db97c6d13a35a6e17779230b9bfe60c749c5a936f3684fc6ff40bacab2b7f87e668f17c4fa43a44fd9a773e7e740f0fc0d86c64f8f29887c9f72ea599234c84602b54028545edac995a9b526d76c625068db3b36d885d0b5179d813d7a4d747b63994d64701ceaaa56728f1a6e25580ebdd8ffebcceeb8b3569c3ff3b14c6f59a6652746eb73454dbc2ee9374668714035501604bf7b94a1b6718b85201728066690f593910e9a725fdfc8963c344cccb595ed80df905b10652fa213c2a82cc35e1f543aca5deaae441ca9bd44d65b5308ed13057dc8dce1c68f331a1f4ebb6cc4eb49fb7f901799cc735e69093730b20bd36b676f64c2c5e731f712cdd169cbdfce330206f9ef57a2786c90449bd23fd5e000cb92592a93c7fedaa12bf1861cb340860ba80c7617ec5dd4d96cf48535ae32f54864fb2a115ddcfb9e0fdf1dc0f0a81348073c41428b4ae6f2b40f556c3df95f1ba396a8be2adf7f8132706c172b65132b9e718184e9fb05b803c7ce6c5297c9b4694262539a28301ef66fc375fdc45331bedc1a1704aab6e2bfdaa7b30e86e344793ef95d18ec5b022b3cdc8bf9795d0cf1b1d15023b75e30812893247ff2732c2344ea15c7ac44f83d01f87c68daa7d4c4a8b47c38e31edabc4ab3d1a8a2450abf3420770df08fd47b23be074df9456a78f4a6cc19e1762d3c7026642d48898f9721eaa46ff41d316c1736ec25276f8793b61bc69d6a7f046cb69e63c033ef1a507104b42da0a21bad35c99d40a28dbd79a6150108229af03be75bf84ce89ad220576a4ded4b46e9a62b4b4d7c3e4272e22894ae4a4578fef52c20a50ff2f193240794d4f57e11601671c3300304ca9951497820374dea1a7f9238b5ddd59b0794ed3880c4a3c5b770fb4635fb695bc4f80e923cfa0d0f175ee66bd0fcc413e35b4658b98aee0449168721a9694eae37a253088f07ce12336e8d8d456735af3592c167e8eda4f4d87ef6a3f6bdcc56e4490eee408856c6b21d960fb55567c573c27c5c0a1877d6cf262ba35936d0e9307d0582dda5f628d63ced64f35863fe04e50c965c3da466974564778cf523db1a9e32934983388a5a66b9e4eb8212a74f18efc781f5407e41ad9879fd82156dba773b2049d1d75de6f20889d18a53a80a855587dc903b3db93ff75420e395e3196237f036c14cb55021d7dd5620e7a5b1d7a5ee7ce0425745d05ef8ff7443f4f88d145e364d620e56fbe8b1991104cf5df27bdd3f1e12ee160b05afebf663e044130a0424de997c31acf531f568f1b2c0c0221fef18f6ac1ff67ca75b780f0d1b209d89e40370e0b8586cf35ea2c86a52cd4b12326f874f45a3daa4b9aa7b604da7144650e3f35df8a04d63f58e8781c027ac618868b875bc21e00c0d7aa999844fdd9360b5cf5a95aacddfb1e01a14636f77629aca01f8531318795d6db570efb6b75cba149bd5e8bfd888f67e684fff5e88475af6c830c85b5e364cc629e76cf8cc6bff65141a3b8c616a229fc8202dee98b22d3a61abd80ab010d6cbcfbe20fe2b22a0bd0768792a655b81686c257b3a4ddb602bdf7e216757c3027d906f3868f36c8ce65f47c4fb6ec2b833635d456991c98bd6f07ebb8bc486f23b9ec14803087de562b8032afe67fefbd49035009b7e58f2702582225cf842ae33aa6395e855d0693590f5a14c1721b74d6aa33122b4717e6215d0f72a1c9cf7626d61bb9c456b497f5aa2ced7dc90828e4682f53bdf950bf4a9abcdf3e6825f5eea4c79ceb9e85c9578d0d4a38db008d18e8cf4cba8961e4fb918711dcb7748008f51b7b778076a69dc3466e1a05de1921ceb02b11ea04a5e087453df63cf45c3d54d990d4cc9d0b1bd7a4d5f6b148bb48c9daae854d784773be4416730baa1f389f99d32707657246237e8c56fa3683ac9d4a42c95875f45249eaddea1f150a44387c3adcd965f98b539e4db4c43451525df87282f7462cd65a1f45c756b45cea01dd5808ada9a6233d770c414961045e3a9469e8ae40e209f7242215287e291b7a998388cb41a3f2575a3fa3a4f6396d95c3b3ad7d1b0ab8dd5c500441696fa4262304681eabfe1706bcce0dcb5aefb32ca543779858a5c6e70add486c786e56e8a96ff3f0473a570da58c225dcea5011aa0c9beea900524197c7504be82918dfa9ac92548c9a8f307270dd112a1a116ae11e02c9aa76f1b822d7418659085cf36a9217f86f833ebc0014a142585dcd449674456ed4318926799c2e6b788e354d10ed877cb58c53d1d18e0e46e19bbb07ec6915950b40581cb54a013fcc111eaab98a5b894f9cfb1a0c5e86669870b9f443e54cf5288c28c97e944211980a6ffc91d754932ed976e8a02d55c7980b0eeecd0b6e32b715fb0e0ce221d5eb62e00303a871c02aa11689189ca87dd4ef4fb633e3e514ede0f9bd46ddfbbd3dccf40512c42ea764b710f351d134c2fd4af95887ccc20f0cc1b05f2cf79166cef14dbc7bcd5cb45ee7435f996e15d2829b161b6f2614583274992793375005d30f94b4a693616c58df9148e3e3de72023694bc10cb6104d3efaf5f279d8d7a088d8773257e646d132ad19387f9b3d108e84edfe8a571ac03632ce989f4fb23a1b74819bd652e2eca6aaa5afb1d29df744a1cc242dc951d9a04456b42ef5a868fe22a0cbea3e11cff741d8d8397ea5f205f2d09ad6aa8fbd3aea4706eecc155ac5b46068e503115c5da49a217deff569d4d960ca67a2b2b18a5155a29075e10688b94078c007ce489db7732f6d251c53e252bb4a8303df92070c5b537f63e9ace7933d67ae1b17c74869533a122293f0353f2d38d3af3a309311db2e7ae47a007cbea162d07569daa6ff487d0f00c277614d4f703195841c37f87b5a2bbc19cb51453c0b3a7b3c97371990ecb8d729f6969e8f0efe06b321c046c660ee327f508fd79f7ed564c4bc3b4601b2c0779422804c052c75df7eaf86f9941415b807b58ed56d875e8e57520a9d407414b19d70ef1c8f3265953d82e1dac41214b6912098d29c56fd43022b82a34b8dc1f0185a0a14d0c2bc16c8c93f12d3f64c51d44677c53989cc462187f126aa5840f2e1ab379a0dc7bd4bf06474f01c33f464978e5d29ba7f92df7e1b76b77e7e9384e3fac23938170a2958725e2f82d7df8111ed65cd0e43f03b98c961c8bd213bd5dd60a876d76bbc6d6da089c5014c7e433c149724f84aae2cd227c801abde03d75dfab15bab8229c3a0eb2a57e0069f1c6f78a5718d89f75da83e3d909a0524a38958c04ca86a499bba0a96d2ee0ebc64baf6c5d6ffab51d87cfea2df7bd3842a5243f015501c4af66590c73148c12bd6d483376c03b20241256d13bcf32b0562e03176e09c6fe8a4118e9b9d0683f9151ede7a3a56e8687c5abb7c0668f2400be6b499d4a3a91d0d8031168895b55699909132814738a8f2f80b66484b4391897252cb55c3c3d0e70667bacfbf39a8033d0d1fb935e41a9028970f1a9fce16925bec30194dd838f4b92e6fdd7bad644bede22d630512452bf95fb436f7cc46757317d04667d4fe8ff8d3a3b8cfabed5130932518efcc6eddb9cb5523e67f2c73ad00fdf7ff6ffd60de5c792da44c53e4edd6a401d47b89e80c4ea2ad874d3bbb6041cb50bc009dd6ffaf3a98e409790e4060ebfdb456855152f273fa0d00214054e035e30fc35a8c0910107e0df6b7fe2adf02a1883091b4c10c901fbe57d1fe5e45d086dc4547865d5d658f072ed71f3e4176a2ebd6db154b48983c89cf6b131ba57d094954ff2bae2b0232674724cf6c669c3953791de1c9cb87284b663cfacc20dd37adcd0827927f050a6c610b994ef13838ed1242383910f4fb43d3fb45842c29aefb9b8958231a71c32ca484a7c2e4cedc704b2b3b204bc1ab5b4d9d7c95e7f6fe35b1391de52862882d441e1acbeaed09c0342b1007f9fa4e0110aedefc683d32e09d085f322ebb6167ead3c4020a2aa877924f6b7c5513f79c47c137efa01fec18ee94e25a6a6e357566ce4d98c60ed9a4bc4c26905167e7ba2fef467ef8e7c36970b3e301ecb775467b435d64fc152e3dbde02ca3d111cc5c01de15f8ec3abe23b1f4329ffb6470264d643166f3b75e10d392efb49aedff843bc26067fe8e2f1d2562952fe22b863b36241619d18c6cb49b2d7c1a410a7e15fb6187136c8bec459e7f7372810cdfe9673d017e039ce0e9a00e2d84b62bf82561d3fbcab5d1c498c5c663b6d4ae0b8f3cf90a240e5680876417d4139f10dac57cb06b6c5cc962758d48bb7c46c46760b1e73e1dc8794e26eeb421195b70bddbcedd807d9740b0cda11b3187c2b9b987b913dbdc0c217326fb3d20f641494b3f7e7d2fb042137880a0870889dc329f950083af1a1d1314fe5e0a9e321e9165f1cbdc4165690c76ae933c350a440a3783a7711fe9a411d78fd84e7dbe5700ade462fef05e52e4049e2b1ece892cfec608aff6bbecacee0f39ad9a00714298ebcd51f8d4733254635eaeaa829eff23d1f8fd3a12d143fc32759286b58793dc28965c8688f64fc48c300f27368c3acf0864dde99c66160e141cd743407012a0bb27bb659b574e8a692631366b7aea4523270c71023d3168cd9b73eb01bc5f0127caea4004bf91079fd5868fb5ff15d18821ea3c1cd1f8961ceb837f0277036f0fcd9daca36efaf0170b3f0656901e55dd1ed7582c71a5c02dd31fd944427cbdfd8d730ea7f805ab1d1ea043603b780465ffb41630147f1e93b3abebb7444b878ddd328d2997110b48c6277bffb694a6ceba0fd6a83c5272dcaad9b3442f04921b4832866d8826e6f27", 0x1000, 0x8}], 0x820002, &(0x7f0000001580)={[{@creator={'creator', 0x3d, "b1dc9e7d"}}, {@codepage={'codepage', 0x3d, 'iso8859-4'}}], [{@subj_type={'subj_type'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '{.]*@@&'}}, {@uid_eq={'uid'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '!'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '-.'}}]}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001680)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x401, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = dup(r1) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000280)) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1fc, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) 06:42:30 executing program 5: clock_gettime(0x0, &(0x7f0000003c00)) 06:42:30 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x40, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x2, 0x1f, 0x3, 0x0, 0x5c263e3d, 0x80, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x40000, 0x2, 0x5bb, 0x1, 0x7, 0x3f, 0x8}, r1, 0xffffffffffffffff, r0, 0x3) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='./fil\x00\x00\x00\x00\x00\x00\x00\x00dLr=./file0\x00'/47]) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 365.560431] kauditd_printk_skb: 36 callbacks suppressed [ 365.560445] audit: type=1804 audit(1603176151.200:640): pid=18956 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/412/bus" dev="sda1" ino=16545 res=1 [ 365.683529] audit: type=1804 audit(1603176151.230:641): pid=18956 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/412/bus" dev="sda1" ino=16545 res=1 [ 365.766112] audit: type=1804 audit(1603176151.250:642): pid=18964 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/412/bus" dev="sda1" ino=16545 res=1 06:42:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000180)) 06:42:31 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./bus\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) getpeername$ax25(r1, &(0x7f0000000840)={{0x3, @netrom}, [@rose, @default, @netrom, @default, @remote, @rose, @null, @rose]}, &(0x7f00000008c0)=0x48) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f00000001c0)={@empty, @remote, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "788db2", 0x6c, 0x11, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x42}}, @remote, {[@dstopts={0x62}], {0x4e22, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "7b1ac2d6d21d44cd6d6fac55b1c17b9cb7e8cbd0f7e763451a1d213ad22d0fd3", "48e57a1a45398bcf2980cbc2e5f33773", {"91568a61cbcfdc345fe9067a27c5be10", "22a22b0ee2267d81cac6f1881ec87dbb"}}}}}}}}, &(0x7f0000000280)={0x0, 0x2, [0xf04, 0xeea, 0x158, 0xcab]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mice\x00', 0x400) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000340)={0x1e9cbf84, 0x7ff, 0x80}, 0xc) dup(r3) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x1, 0x70, 0x2, 0x3, 0x8, 0x80, 0x0, 0x4005, 0x24800, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9c01, 0x5}, 0x5004, 0x3, 0xfb97, 0x0, 0x0, 0x40000000, 0x7}) 06:42:31 executing program 4: r0 = socket(0x25, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 06:42:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 365.866454] audit: type=1804 audit(1603176151.250:643): pid=18964 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/412/bus" dev="sda1" ino=16545 res=1 06:42:31 executing program 5: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 06:42:31 executing program 4: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000200)={0x7}, 0x7) write$P9_RREAD(r0, &(0x7f0000000800)={0x1001, 0x75, 0x0, {0xff6, "c623663090a973b8944eb6ad8b7c140936ac40be9998f4c7d09f63c47916dc36ff397cfdd5fee0b9fe3afac4019bf2633cfba59d5832b9059116a040293a8f9371fc56461efaba2942560e82214d3fe38049de1236d0d58759f69441b3ef1912d279fe3e3c3773cba904b5d56ca7fb17eb68abb950e305846e72333009e79390419488731970d3dc73940798b31f7b827587d4cc0bd5ef9ca258a22c63ef8be4a0e40bd4bd6fbaa49ef7450ddfe60d46b2f8ea25287b734515fb445fd09f38aa507b8ccf848f8d56ffb9c3695b6abe3e4ab65707e1e5b369002cff8640646b387e3b864706f073d35643c1e955c3ebf67d1ae8137cc742228977ab424b4f1d5d2c0e89dcfab9dad98ced89018d2462b59828d132c5f3aa0f3547247bcd21cbe090487dcc78c91533741ab04c5207e2ebc903526162714a0065d603bc6f1448ca150cb87dc55d75faefa4b8b9e9787bd0755826a26a490cf55d9bde2cc95a058a5bc218424113e81f6b542864d3329b483e99287486261e4c150d1b5503c9d2c1865495a60803dec20976fbfc1e4a53447d4bca39b22d4b1aac2f1c8189359520137b80e8b2debcc1d35865eff2342b15cfe2fd3e2b4609f2754a6bc92c41357224d0cb2cf06bc16fe309406862a08e26986971607d16a5181ba0f954423816136a42b4b2c8efceda20c1d56baa1756582ec29292344bcadb231fa69cd3bab878c27224aeb61e1584b50ff7fe5a22b622bcf6502afec4dd248f1d2ce37282604fa93527c504b14b88fa46b7b4596653ef48876bcb2085870a8883f167e54c6487a45a6215944ff0daacaa9fe7a9b6f2f042b75fc5533b006d6992ee3825978742f3dc89b64cdd02a04313486aa8de633c379b80b1da36dbb9becf19a27bb0699b81ba97fd7366df1c8710d11cf1f62c0fbc2cf2edd9c20870d9a9b72437adddc441d491e8346c578e70bab13ecec9181669f28db6b9876616b8689a19de0b47fe8ece203a759e12b3f62b1fd870275821dbd0891c0ff6f030e1163a4a4ff631d0bb21dd8bd050f219ad2239ad74beba8b9b3e0ec088b88c7033c3ee395b35fcf63c39965001eef069d3682c8582e1016b70ad984c2a2a642a7ffa6fc79d93cd079e48c5d5ba8c1bdcde5286884d31c1ab05013d09aab81a4bb5f9ccf719c59ed22bcece72bc9458dd4d496d472bd142e1a28d6edfddd6717a5258ecea36c6141efecc945a7e2d158d5bf3947c5c884d1f6bc50e4fa9f6ec38e8678f158c73bef485b467f87aef6a50d36f1b6baa5d9b329fd31bf96ebe6745f38acc41313ac0421b75a9b84b4fbcf8149162a09cb37e521d6777fb324061b4294fe77b98d45473d88134cfcaa2a6d16ae1cd6e4c7a538598b743a66194eb27c0128123a143e9df757077921feeb8f9a6dc135894a23aae1b855b90b81c6a9e48c9a4c3e20adece071c27c09f447960c998b2e06d874acbd93a78c1960be066b33e3159c7b853263c3cd988b8eb994733c062d2682cba667110a843eb5fa4367dd7a7c9c063452bedb9b306f878923b0d8a65760f6f1ecd94bd6102bd87707cfdf4e54001e44a0554c73b24fdf25b268a4956470cede9d0154ef7931e5c52a4aa87d606febdd7f755928a1300f57fe77ea01ce87cdf63077bf080887d02f9f2d3c4d700b80ee53f8d01e9b0495f9914ef927175f7232a03fa7b3afcf44cbd268a02ca883823f5712fa61dc3d935e1a5c871ba8f59fc108b0e58330f05a55b65a08483481eb515d5402fb5b60d41b17238922f7219ce52a60c685e5055285f92a35d014b0671667c83ad6e8ffc10aadb59fa07738dfa2047c194d2e147055a32c863b291ecb486d99af975ee5fa9bed791d316a28020d92ff6c559e97fa91c7b5e6d0bb1c899fc75874e9b7993de785159b7841c877befe06afb793cbe85e9c6fffcc4c1ac0b665a072a0d62f0aef043e429796821024fbbb2ec13654e621cda20fa11f4dadaf48819db23b21f3a3830f7310f2337c068ddf8929b35cb1b4034e04b9735ae1ab28ed549623c1cd6df473c410b03d2fbf087ccfbe0c686bad9eb6cdb7ca83c0b4228d08fd6b92a09d918191f7f2711854260373df5c7bac56dca0d5787460318f096407551aefe6ff62ed4bbf02da5bae8b4a95c2924757486a4fc04d460acda116e1bb520a99f1220732306fe9dfe84c483e3faa9a1d05ec5d32b4075a047e16df9c9f5649d83eed6c51395d1fe0b3f3a1e90dda0d7824ad07fea13f6b8e569ff4ea06d5878d838a2c25872c69f53034817fbe2de5496fe7cc11bfd7b67266649f6fc92bb188038e5b35fb1dc3249f7d73f957feba46dd114a3811682402075288cf78c75cc51e8a9509b82cc7a2094406598c11e0f11c370b6089ffbd0877ceb5596ac9894ae5e564ebf46c1a6a4cce8464c364b20c38c52dc3b22810de71c01444e081fdeb8e1e16335c323899626dc5776c722f5157dae84a0f0257ee4e87c97f3c151f6bc39acec6a29400326671f6b86c0fdcfb0f862c9f3acbca83c8af975b5920c72830e8976376e7acc84d6dd0bea56b214f55c38ab76ee8e36c0f3f6f32a01be82d6b2048d45e5d0cf9d586d7c52fd046a43de53774a97def0b421157a4d4594ad1834bc09111985108738100bb6febeada037ca462059bdcd10ba7fcbc56a72db6441dad6bb2370086147ae0a8bcf73031ddb6aae161143c8e6cfd071380b6d4b4d2ba8a67798b80360f9a51f515076f4756d6308bda63494131d0ac8b4333bb1ed8a15c96e8dbb834b775d565010e8571a9724554a83086eb20a27ef715a993bcfb4cf3706b58aa30f37d7b331626d6e40d5bc025d47b7fd648aaef5329a79412f4eaea6b6b0145d3e4cc5752a8ff61c11fd6e8d37025eef1ed8f6f5b4e9fd1aa6903f9f0bffaf8fa42c12c6719658922d5dfaf552b417b6d8c7feae9ac010dc1ecf7452caf5159fbb03542d3120c97948447c11e5cd2cd4e78eeeadf2a3ab03da390d28323ac583aa9cd6bed6776a0a229fd8b90de57932ea98a72bc1d7a85dbfc1abee4c1ef6bb52d53e63c66e0b433a2914051631c3b7eacf407800f06df7f2f4a17e44e8104f0821ed614fd8e2f0951eab92b96e519e6d6048458daac94f2c1830bc7a844587975c3505aa9388d1af6a4b30c7eaf4e2e9946e5ae80c28698fff4a840727b55165894abd6e5dff070ce457514d89f6ab1838c3cf40a62fbf56ea2558852ac1d892a4f046b751aa8b059f05b645b1809cda2aa25c22c324a47b684b2dd4f9a903bc061f432b000ac1a7f86d7bc18c0c97aba57160ce917411740ec12fb8753eaddcb41e7575bdb5255acd531543f073f988389b47ef821785b3f530e73b26d1523b06fa756ef0725cfb3c0301d4efe3010ea4128c50e2e9ed18ab15102887b1fe08c8a4918273eb9ebaf86c21dcda54b7af48c8696485f0e2f53eb75aebe7006110574c9275055ab0d5456beb1522d8c4701d9c3ba7e386fb255227bcac3f7ed8d77d6cff444b576a86f75e5015375156421628fa6f1d6eec128941075337f35629979ff92a5c104645f9ae61954aef9c2036fb82c8dca84d33b58acfea068d57a5be581520b69ba42cbaf2e3feb9bed4f59c6ca57af30298161a6973440134cb133880f26c0b1a3e3ca0be96b0dc675b0ee3f6909dc53bd975763073304c301cce8359a2c33cffb4e731111f767072a2388baa5110effee573087309c5574eb2454eaec5d7e69f2882218267e99915f02a31fbaf5e6b0a18ec3bdb0e00837e872e206a8422a975174b13a067c43f3e8ac507763e5292500a6d2f4b3617f17a10bb0376f98a2eff382672509c2817bbe8effe043e35210834e9e36d9e25daa6826146dc72b211eda89bfe0b35a2267169717ea92ed6eda9172b31e5ab6f0cf3a42b8079ef687b61a916278f583917efdd25690f9fe99753023ae677f249a699f7bd0d984a5babcd3d6bde48443d3ca5fab8ee03e5bfea05c7bd5d776c68444155302ba2173802c5b202614b305d39e41d60819369ff9575a93e8724c5bd662dcde558a064ed9ccc48bdcdc87efd27f8485492539949f2fb569f0c8996493848054728d162a2ba7b048579bfb9bb45f328dce7abd088fb8b1a90ce4e5760929dd1f64a7527af692db11159b69d9b0c1a2a2ca081391597bbea260c4259dc02ec1b3ee47cecfb08b8abd7c1448e278bea0249564b667ca1b3b22d57598bc3f96af6efe973732ea87e0471ece4428d09dcb42674d22d559cff0653b10e33bd54247a3215102ba1c28b63109753c186c4c4a2edf4e9de74595d56e7cd827b3f3a78ff3471fc85a543482848a6d28c14216b0a1559483f2ee2a7f290939af484bb157c7824ed483117548cbe1cae8da4ba9b836c59251135a7efd83c44699f68508f0db5ff7bbdc510dbbaa2ece8b910ac024e03e0db694195e9fffe489cb2848a7e9d07ada87450e497281191f0884f070c3ea1b4ce4c55a552911fefec04baef1106615cda17dca33ac7bb4e64ff34c8eeabb5ecda12edeb43a22841cde7e9cb29e9ae85434476154ba21b372cb9c94fa424a6e9368ddcfaed2cb34acb09e5753d3051f71c234c1cc936d3b0bf4325d8e99528ea99d2df39c16a3f4cfae4c50b900bd591f8f5d7cbb34b19f419d273fcdeea82a85462bef2cdf9925cce6bb300d57fa663ee730c739184c9386aaa93fa2368fe39b031a7ad78310cb644f867baa4cc51f2ccfb511b8a42f09cc93d1af62586fb2152c435da2f7fbea4c71d9a975ec703e6488e8d965005ffcc9ca3b6582eb577c49f6455181216a11ade3260aaa4c05b9c2b36150ed355dd468cd9ee2985378b0b92675e56ac548689fe59cc915d3d6943cc064e1a5855f36a1f4a3d9f0d7188f4c6daad514c784fdf1421656195d3035651c8afb9340070f1bfcb0fe1137e7b011f8c37726cebafa4ce75f11254ec4d784bd94757ff72a57304864ed99e1918fcc8a51ed7375904210720d6c2aae0df9d12483b0cead2c4f6ea95f1e035bdab56ca0e8c92b5d9585c4ef6d45f171dceff95506a769da5bbd6ebf6f69d031ed6f1c96b14c025bfdc23c32da3fdf1125272addeda25b2e91ef0f8d101436fca41231f22975122def4fecf87923f71579c0c4df487c13e401712654de25e3a4bbcedc5bce7ebed38d38247dbde2f576227734a44a89d415bbc73a7f353cbb5ba1aa4dc5918bc0063e9783b119503a6fe5b7953c47fb2e36a713416a2136814ca968f5501ae3ef294995c09889bccacc27103b18bea890bef65379925ce67b099b4dfbf925e99b932490ca444558d7f1b2b23767071ce9b7e7ca02c1e7dfe51f6a01bc4a07e9ae81e619277be755fe0ff76f314a448599ff2a868203be8c56e5fcdb9b000347faf131492ded4601bcae443ef9b4024d835d011841518457983be06058c714b58a251ef86e0d16b34ce5416f2141687def6f86f9b66e9068d921afdeb448c179b8ff23619d5bedd914e445b3a19f6ed4b9c3bd30dd143837029f300f06e0ce755bbd19ce67d194eb7dee0afaa60d2307870b6703e2cdad60198569cd7a5f1f220cf4d11016b0eaef79806ace6a02d74a3fff1ffb3b65507ba8aa220ae3e899fae32a10f3852b03a722f17b0df1de298fe44f2603600c0e0c9822487106807a3fda0ac094469f9cf73280c35df16d5a131ef9779d6e6926edbc40b26be8bd4c61d2321077af9f9afdb3cbb3a6c2113bad7f0db8981ddb45d83d168f33ccdc1f694d2eed1bc8a869d7e9972b51e825fb9687f1f04d4"}}, 0x1001) 06:42:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 366.025399] overlayfs: unrecognized mount option "./fil" or missing value [ 366.027362] audit: type=1804 audit(1603176151.590:644): pid=18986 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/413/bus" dev="sda1" ino=16374 res=1 06:42:31 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x7, 0xa3e], 0x2, 0x80000}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000001c0)) 06:42:31 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x321001, 0x0) 06:42:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 366.149136] overlayfs: unrecognized mount option "./fil" or missing value 06:42:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x7ff, 0x3, [], &(0x7f00000000c0)=0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:31 executing program 4: r0 = socket(0x23, 0x80005, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x80) 06:42:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:31 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$alg(r0, 0x0, 0x0, 0x1800) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0xf8) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 366.252326] audit: type=1804 audit(1603176151.630:645): pid=18986 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/413/bus" dev="sda1" ino=16374 res=1 06:42:31 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0e634ff3"}}) 06:42:32 executing program 4: pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) ioctl$CHAR_RAW_ROGET(r0, 0x125e, 0x0) 06:42:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 366.387052] audit: type=1804 audit(1603176151.650:646): pid=18986 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/413/bus" dev="sda1" ino=16374 res=1 06:42:32 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 06:42:32 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x4, 0x10000, 0x0, 0x2, 0xff, "db8b80240ed7ed7bb2cce05a6071ca1a55eef3", 0xfffffffb, 0x401}) 06:42:32 executing program 4: r0 = socket(0x18, 0x0, 0x1) getsockname$ax25(r0, 0x0, 0x0) [ 366.536458] audit: type=1804 audit(1603176151.660:647): pid=18999 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/413/bus" dev="sda1" ino=16374 res=1 06:42:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 366.750314] audit: type=1804 audit(1603176151.840:648): pid=19010 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/414/bus" dev="sda1" ino=15962 res=1 06:42:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x108) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:32 executing program 5: r0 = socket(0x2, 0x1, 0x0) connect$ax25(r0, &(0x7f0000000080)={{0x3, @default}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @null]}, 0x48) 06:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:32 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001cc0)) 06:42:32 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000180)={0x3, 0xffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 366.794341] audit: type=1804 audit(1603176151.840:649): pid=19010 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/414/bus" dev="sda1" ino=15962 res=1 06:42:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:32 executing program 5: clock_getres(0x2, &(0x7f0000000140)) 06:42:32 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7dae27", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ni}}}}}, 0x0) 06:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:32 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:32 executing program 4: r0 = socket(0x2, 0x6, 0x0) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 06:42:32 executing program 5: syz_emit_ethernet(0x64, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f35db5", 0x2e, 0x6, 0x0, @dev={0xfe, 0x80, [], 0x3c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @payload_mcast={{{{{{0x2e, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x9, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x4e23}, 0x0, 0x3}, 0x0, 0x4}, 0x1}}, [0x0, 0x0]}}}}}}, 0x0) 06:42:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:32 executing program 5: r0 = syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x1f7}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = dup2(r0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000000)={0xdb, &(0x7f0000000240)=""/219}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 06:42:32 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:32 executing program 4: syz_open_dev$dri(&(0x7f0000001600)='/dev/dri/card#\x00', 0x3, 0x189602) [ 367.396845] SQUASHFS error: zlib decompression failed, data probably corrupt [ 367.436273] SQUASHFS error: squashfs_read_data failed to read block 0x13e 06:42:33 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 06:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 367.497818] SQUASHFS error: Unable to read metadata cache entry [13e] [ 367.506700] SQUASHFS error: Unable to read metadata cache entry [13e] [ 367.516957] SQUASHFS error: Unable to read directory block [13e:26] [ 367.541591] SQUASHFS error: Unable to read directory block [13e:26] 06:42:33 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x101000, 0x0) r3 = syz_mount_image$affs(&(0x7f0000000100)='affs\x00', &(0x7f0000000180)='./bus\x00', 0x5, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000340)="b6c08f92e1e937771ef4a56c4d12ec4f873341afcabc59ea3f76a1fea8bdb9802df211614e6e786e461c47760b8335eaeb27b9e6b4f5bc57003cc93ac02f59cb5a59cdf45f8de3f3c27229c22735d54de9b22024d4e3b52bd6451d557e51cb937662f2cf50d07732f9473868eac0bccf9577b39ffd4cc271fc89c03e799e8e8864d08b0248a6d16c78c08947143e795591ec3a4e1be0db790061e9a3358e5561c76a00e8cfb98ff0230fa7310fa894dac3fb69df8a9ca2da7343a011ec888e819c8a400ebe64a65b485faff8a7e008041b75d5c2827e0bfe60d9c254ce188fe6256b18c716f3c85db67d2d79", 0xec, 0x80000001}, {&(0x7f0000000440)="9542debef9bafb7c9d34de45a5ae23e73d0c6df13390c72b07e811e648b79420ad4d0e3c39457058943b1eb4e3c58c05b3ad51a0ec9609b1d15f1b26e769f4e66ac6f67b1b3167632fa5f8025c8acaa51dbdda40ffcd40015b7abce5c3a3056a0fc50a1ea729e6445a2d932974334432acd030dea32577b6f01be5e8", 0x7c}, {&(0x7f00000004c0)="8b58b195091da1b138e5fa2d0cdd28f346e54b631baabb9a4ed2419a24cce8d5f37cd4ad4e63e354095c5996622bbf9caf74586baf8193f8d977d2f7525e952ec3dfa7ec55bf8a6ca57b59d10b76809455c9c85e1dda2991c47551fc2a5eae609c23edd19bbc898d446b3fc1c1013b28b96de3e31d94d59340383fd8c532454a7542b1afde2742483e28a38edab652aa6a44a46917052b5561f583b0d7b4690dafc56ef4e615459a0164d65931e6cffbd9af5f6ca78b661bbc4a96f56d0036b5fef1b465f070f182528faa40ccfcf1f279a5a2d22d", 0xd5, 0x8}, {&(0x7f00000005c0)="1bba1427dd3a577147317d755685efa287e4ffc31477f830aab4c66b23fd008b9610a780a1cd356f7149d8fac6a47a512a67734b4b96dce780f4455a98eddab6850c1af22e0714a42e7604898fad5f258ee63e11971ab1a9fb37150378dd400ec23870dcf22ec523fe26e485c82a474a294ba5ce96ad9f63bcea363d0ca3c81b43080040d3cf6857e781aab5930d1c2268a31e37a7b06166272da8c4dc604b1b3ac16325cceefb3845e5ffd67b10f2cfc8e941ec7c84ea458aa222ac27c8c446694efaf2bb56cc32ebb48f6b642059290c1f13190556a576f9028a1b5c83e3e157", 0xe1, 0x20}, {&(0x7f00000006c0)="f77ee2d23e5e52237e632fb33dc32fad182dcece25ec1e8bf5acedf643d7b0730ea4b57dbc7c4e0ceea5ef084140822d7a340977333cb1c31d44346d0b334f5f978cf729b1addc37fd3e8a539f948b973042eeac0f4147a583a4b3afc581e08350cf243e0a9891c50ce8322f628f61143aa78ef9bd252fac8d68f7db75df3c25ac4847ab8a113fa0db9554a81ee109e78b3a91a1e569a12d2030264843a8815d9c6e2206d1d4f96bfb47251e328301a31cf987d5a840ee517811b37c5eafc90b81b22135f7ad46fa5d139a255a", 0xcd, 0x800080}, {&(0x7f00000007c0)="1705cb23714004140ec827809acfbde9e24fbc84b5ea0d154554e1b51c8488ba80af3cf32841328390cf869c45a4e393bb7a00338be583296038b622ab0490986ef3a5e0631ceb71f55655715dffa3713560f0915f5adcdcc96f99392e94", 0x5e, 0x3}, {&(0x7f0000000840)="2855c8c87c99dfd0642380bef7f494d9b3bfb57a53d68e1e1eae13ecfb2f3eb98f047d1a82d198eddb3e3997fc4a5581f3ead616e74f95202652a5ede9228aa0aac1de89912d7d9c44092e70a2e0f00c20930390d04548362022e7217d628a18902ae1e151de0cf20fd015796cc7032fc49cc7b8355bfcbd56e0145e294f3ac361fa052caba7e7fa36262d62102c65255ae7df0efa8f6143b9e6b6d74f41604959d19e5da60395983190d22cadb36b872e2a3b521b6cef9cddd7be2ab61f24db9d6cb7cad861fdd78527a6f227609d594f6edb476c30d2b7806547b98769fb6cd0ca83ffdb48a8f174edd284ea789026eebe0e1e1d1f19b8c64d9d64f0", 0xfd, 0x712}, {&(0x7f0000000940)="633bb344d120f410d4f72ae0e324ff7dc128f7e3130e9fbb842c80b7335c2615ec71422c761baf6d02e93d1daae851f6850c6734e585f38d2c3267f87acb650b116f32414bddf264ca23d83c13920860ba4d072773a50fec245b7f2b8f87faf7f513571f25abd1021ea3275b23d0feee4e3ab553ba2c1b8d841047ed97dd7366954e1cedfc9159b2c9247534adbaa5640c2ae3b4955aeba244627f932756a51a73825ac24c2cf8604152405dd8ef47e8fe3a5fb10353f6f613098bc7a974213dc49549d3054fd452a8dc4088b051ad0a3dc5d69fb8a6a4be4d235bef8d69a12780fe7bc35a53adc3a726a8a85c4d2a50ed1ed2", 0xf3, 0x2}], 0x0, &(0x7f00000001c0)={[{'(!'}, {'m'}, {'syz0\x00'}, {'syz1\x00'}, {'syz1\x00'}, {}, {'syz1\x00'}, {'syz0\x00'}, {'syz0\x00'}], [{@obj_user={'obj_user', 0x3d, 'syz0\x00'}}]}) mknodat(r3, &(0x7f0000000b00)='./bus\x00', 0x8000, 0x81) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x1, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040014) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x300000e, 0x50, r1, 0xffffe000) 06:42:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0xffffffffffffffff) 06:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 367.759680] affs: Unrecognized mount option "(!" or missing value [ 367.765959] affs: Error parsing options [ 367.802823] nla_parse: 22 callbacks suppressed [ 367.802832] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:33 executing program 4: r0 = syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x1f7}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = dup2(r0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000000)={0xdb, &(0x7f0000000240)=""/219}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 06:42:33 executing program 5: r0 = syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486aa4581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132871800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd0100000000000001", 0x1f7}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = dup2(r0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000000)={0xdb, &(0x7f0000000240)=""/219}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 06:42:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 367.949235] affs: Unrecognized mount option "(!" or missing value [ 367.964028] affs: Error parsing options [ 367.971102] overlayfs: filesystem on './bus' not supported as upperdir 06:42:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x240002) kcmp(r2, 0xffffffffffffffff, 0x0, r3, r0) 06:42:33 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'batadv0\x00', @local}) write$cgroup_int(r3, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000180)={0x40000000, 0x0, 0x4, 0x40, 0x48a0, {0x77359400}, {0x7, 0x2, 0x7d, 0x1, 0x4, 0x9e, "976031ce"}, 0x100, 0x4, @fd=r0, 0x7ff, 0x0, r1}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) [ 368.071305] SQUASHFS error: zlib decompression failed, data probably corrupt [ 368.072293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.103087] SQUASHFS error: zlib decompression failed, data probably corrupt [ 368.118525] SQUASHFS error: squashfs_read_data failed to read block 0x13e [ 368.131946] SQUASHFS error: squashfs_read_data failed to read block 0x13e [ 368.145390] SQUASHFS error: Unable to read metadata cache entry [13e] [ 368.145397] SQUASHFS error: Unable to read metadata cache entry [13e] [ 368.145413] SQUASHFS error: Unable to read directory block [13e:26] [ 368.166117] SQUASHFS error: Unable to read directory block [13e:26] [ 368.176496] SQUASHFS error: Unable to read metadata cache entry [13e] [ 368.203163] SQUASHFS error: Unable to read metadata cache entry [13e] [ 368.212905] SQUASHFS error: Unable to read directory block [13e:26] 06:42:33 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000100)) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) 06:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 368.262715] SQUASHFS error: Unable to read directory block [13e:26] 06:42:34 executing program 5: r0 = syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x1f7}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = dup2(r0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000000)={0xdb, &(0x7f0000000240)=""/219}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 06:42:34 executing program 4: r0 = syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x1f7}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = dup2(r0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000000)={0xdb, &(0x7f0000000240)=""/219}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) [ 368.428579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:34 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="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") ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) [ 368.577249] SQUASHFS error: zlib decompression failed, data probably corrupt [ 368.671692] SQUASHFS error: squashfs_read_data failed to read block 0x13e [ 368.679766] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.702306] SQUASHFS error: Unable to read metadata cache entry [13e] 06:42:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$l2tp(r0, 0x0, 0x0, 0x40002002, 0x0, 0x0) 06:42:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 368.736448] SQUASHFS error: Unable to read directory block [13e:26] 06:42:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:34 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) [ 368.989683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.067578] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x40, 0x3}, 0x1}}, 0x18) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x50300) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:35 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000300)=[0x8001, 0x3, 0x1ff, 0x506c], &(0x7f0000000340)=[0x1f, 0x8001, 0x9, 0x6, 0x3, 0x1f], &(0x7f0000000380)=[0xff, 0x7fff]}) write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0xfffffffffffffa5a}, 0xf) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x5, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000810) 06:42:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:35 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), 0x4) 06:42:35 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000015c0)=0xffffffff) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000001580)) 06:42:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 369.624833] ================================================================================ [ 369.636175] UBSAN: Undefined behaviour in sound/core/oss/pcm_oss.c:720:23 [ 369.643197] shift exponent 65535 is too large for 32-bit type 'int' [ 369.647149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.649611] CPU: 1 PID: 19318 Comm: syz-executor.5 Not tainted 4.19.152-syzkaller #0 [ 369.649625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.649630] Call Trace: [ 369.649670] dump_stack+0x22c/0x33e [ 369.649702] ubsan_epilogue+0xe/0x3a [ 369.649724] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 369.649748] ? get_slabinfo+0x41/0x100 [ 369.649854] ? snd_interval_refine+0x2c8/0x560 [ 369.649905] ? plug_client_size+0x1ca/0x3e0 [ 369.705927] snd_pcm_oss_change_params_locked.cold+0xf7/0x11a [ 369.713424] ? snd_pcm_oss_open+0x50/0x50 [ 369.717580] ? snd_pcm_oss_get_active_substream+0x142/0x1c0 [ 369.723480] ? ww_mutex_unlock+0x2f0/0x2f0 [ 369.727732] ? __mutex_unlock_slowpath+0xea/0x660 [ 369.732593] snd_pcm_oss_get_active_substream+0x164/0x1c0 [ 369.738146] snd_pcm_oss_set_channels+0x244/0x380 [ 369.743003] ? snd_pcm_oss_get_formats+0x340/0x340 [ 369.747696] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.747943] snd_pcm_oss_ioctl+0x12dd/0x33c0 [ 369.761353] ? mark_held_locks+0xf0/0xf0 [ 369.765428] ? find_held_lock+0x2d/0x110 [ 369.769497] ? snd_pcm_oss_release+0x300/0x300 [ 369.774194] ? mark_held_locks+0xf0/0xf0 [ 369.778380] ? snd_pcm_oss_release+0x300/0x300 [ 369.783437] do_vfs_ioctl+0xcdb/0x12e0 [ 369.787411] ? selinux_file_ioctl+0x44f/0x5e0 [ 369.791916] ? ioctl_preallocate+0x200/0x200 [ 369.796430] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 369.802076] ? __fget+0x3ad/0x570 [ 369.805537] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 369.809892] ? ktime_get_ts64+0x2d3/0x420 [ 369.814356] ksys_ioctl+0x9b/0xc0 [ 369.817826] __x64_sys_ioctl+0x6f/0xb0 [ 369.821768] do_syscall_64+0xf9/0x670 [ 369.825588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.830784] RIP: 0033:0x45de59 [ 369.833980] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.852914] RSP: 002b:00007fdfb38f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.860653] RAX: ffffffffffffffda RBX: 0000000000015f40 RCX: 000000000045de59 [ 369.867931] RDX: 0000000020001580 RSI: 00000000c0045006 RDI: 0000000000000003 06:42:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 369.875309] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 369.882584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 369.890161] R13: 00007fff9b671cdf R14: 00007fdfb38f49c0 R15: 000000000118bf2c [ 369.897448] ================================================================================ 06:42:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000001bc0)={0x8, 0x2, 0x1}) 06:42:35 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10002200) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/rt_acct\x00') recvfrom$x25(r1, &(0x7f0000000280)=""/54, 0x36, 0x20, &(0x7f00000002c0)={0x9, @null=' \x00'}, 0x12) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x2a8040, 0x0) signalfd(r2, &(0x7f0000000200), 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000180)={0x0, 0x80000000, [0x100, 0x10000, 0x9, 0x531, 0x5, 0x8]}) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) 06:42:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r1 = accept$unix(r0, &(0x7f00000000c0), &(0x7f0000000180)=0x6e) sendto$unix(r1, &(0x7f00000001c0)="b9467f0cd3c9b178356a", 0xa, 0x4004, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 370.008182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:35 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:42:35 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) 06:42:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:35 executing program 5: pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080), 0xc) [ 370.257295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:35 executing program 4: syz_open_dev$dri(&(0x7f0000001600)='/dev/dri/card#\x00', 0x0, 0x80481) 06:42:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:42:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80000001, 0x400) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:36 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x8000, 0x40) 06:42:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8001) 06:42:36 executing program 5: r0 = socket(0x2, 0x3, 0x1) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendto$l2tp(r0, &(0x7f0000000300)="1390fd", 0x3, 0x0, 0x0, 0x0) 06:42:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 370.620711] kauditd_printk_skb: 45 callbacks suppressed [ 370.620726] audit: type=1804 audit(1603176156.260:695): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1 06:42:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:36 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 06:42:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0) 06:42:36 executing program 5: io_setup(0xff, &(0x7f0000001100)) [ 370.783914] audit: type=1804 audit(1603176156.260:696): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1 06:42:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:36 executing program 4: recvmsg(0xffffffffffffffff, 0x0, 0x40012060) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/23, 0x17}, {&(0x7f0000001100)=""/136, 0x88}, {&(0x7f00000011c0)=""/72, 0x48}, {&(0x7f0000001440)=""/139, 0x8b}, {&(0x7f0000002900)=""/184, 0xb8}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x9}, 0x3) socketpair(0x3, 0x80000, 0x6, &(0x7f00000012c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x9, 0x5, 0x3, @private0, @mcast2, 0x8000, 0x7, 0x9, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x4, 0x3f, 0x7, 0x8, 0x1, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40, 0x80, 0x400, 0x5}}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f00000015c0)=@can, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/40, 0x28}, {&(0x7f0000001680)=""/37, 0x25}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/225, 0xe1}], 0x4, &(0x7f0000002800)=""/135, 0x87}, 0x40000003) [ 370.931912] audit: type=1804 audit(1603176156.290:697): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1 [ 370.957261] audit: type=1804 audit(1603176156.310:698): pid=19415 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1 [ 371.006976] audit: type=1804 audit(1603176156.310:699): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1 [ 371.103591] audit: type=1804 audit(1603176156.310:700): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/427/bus" dev="sda1" ino=16022 res=1 06:42:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15) 06:42:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:36 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000002d80)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) 06:42:36 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x10, 0x200600) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000001c0)) r2 = creat(&(0x7f0000000200)='./bus\x00', 0xe2) write$FUSE_LK(r2, &(0x7f0000000240)={0x28, 0xffffffffffffffda, 0x0, {{0x7fff, 0x7, 0x2}}}, 0x28) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r3, r3}) 06:42:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 371.167188] audit: type=1804 audit(1603176156.520:701): pid=19432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/428/bus" dev="sda1" ino=16178 res=1 [ 371.251963] audit: type=1804 audit(1603176156.520:702): pid=19432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/428/bus" dev="sda1" ino=16178 res=1 06:42:36 executing program 5: r0 = socket(0x2, 0x3, 0x1) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 06:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:37 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r1, 0x18, 0x5, 0xbd3d}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000200)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) accept$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2f, 0xf8, 0x8, 0x200, 0x33, @private1={0xfc, 0x1, [], 0x1}, @mcast2, 0x8, 0x20, 0x7, 0x7}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x164, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x10) r10 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r10, 0x0) [ 371.408363] audit: type=1804 audit(1603176156.540:703): pid=19438 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/428/bus" dev="sda1" ino=16178 res=1 06:42:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x601, 0x0, 0x0, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x24}}, 0x0) [ 371.636130] audit: type=1804 audit(1603176156.540:704): pid=19432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/428/bus" dev="sda1" ino=16178 res=1 06:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:37 executing program 5: syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "282f8e", 0x50, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0xe, [0x0, 0x0, 0x0]}]}}, {"04fab35949467e47bef0a8b0ea9b9f30332a4f10ce4d83dec1147f591f95545ae2e677a4d135eb39a6877e32"}}}}}}}, 0x0) [ 371.802923] overlayfs: filesystem on './bus' not supported as upperdir 06:42:37 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000300)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 06:42:37 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x33, @multicast1, 0x4e22, 0x1, 'wrr\x00', 0x0, 0x2298, 0x7f}, 0x2c) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000000180)=0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20844300}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x41}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r8 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100), 0x2) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f00000000c0)=""/44) [ 371.979365] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 06:42:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 06:42:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400000, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x9) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x20}) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065736469723d2e2f6275000000002200000072bf390024465e3d2e2f66736c65312c6c6f7765726469723d2e2f66696c6530bafa7f6b28d255f779ba17af5a865b6df6a3f001bda9c93ea6c6ad8d957e8ef05724c607e9f28a88aa08f66762a8"]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:37 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x8) 06:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) [ 372.034430] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 06:42:37 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) fanotify_init(0x1, 0x40000) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RCLUNK(r2, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) 06:42:37 executing program 5: syz_emit_ethernet(0x62, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f35db5", 0x2c, 0x6, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) 06:42:37 executing program 4: syz_open_dev$dri(&(0x7f0000000940)='/dev/dri/card#\x00', 0x0, 0x12000) 06:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:38 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 06:42:38 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) [ 372.363411] overlayfs: unrecognized mount option "uppesdir=./bu" or missing value 06:42:38 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x9c41}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7fffffff, 0x400040) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000380)={0x5, 0x7, 0x5, 0x7, 0xa, 0x4}) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x14, r3, 0xa278dfd252aca789, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="25010000", @ANYRES16=r3, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x44040}, 0xe4afddeaca59b36a) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 372.504631] overlayfs: unrecognized mount option "uppesdir=./bu" or missing value 06:42:38 executing program 3: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x12a) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0xd, r2, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./bus\x00', 0x81, 0x5, &(0x7f0000000400)=[{&(0x7f0000000100)="b362fce455fada42ea1e4d6ca023b2dfcb60c06a692b932d58c5136b5601d62bd4350978b7fbc0f5e45a9a65", 0x2c, 0x3}, {&(0x7f0000000700)="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", 0x1000, 0x4}, {&(0x7f0000000200)="459e5422d07c62663ee04ed9491ee268e3ecc6d2d120431e7442ccd4a80a8308322e9ecf75176f99756cd33c5b1cc7b6f5a8c3aa8346d209f20e2f61c59b9589baabf43147e74035001516c816a9b8c03fea0b036ac218b19451044f7093d0a4d4fa4d64cd03b0a4a2cb3adbb30ba85ab0457fdb25a2ff19f0a5e199a25d22c4a3e10832bd56dae6f3d053f492d7c9f84521b1826bfa79d70693dfe77004e9524defafb2f86fbb996c6b429dd4997c019f3c32c3cbe6ae84b082aa73edb04fc70def2b3facce42979233cbf8c3b8802f20512dc3fd44c97e8a3a1e1dd6d57b4daef1", 0xe2, 0x2}, {&(0x7f0000000300)="8c4762d8818686d26d474c54aa7dcb574e740abd757994378ba31bfd0bca88268e160edd8a45c01d676276593a31a972578d6144d39717ddbec0e1ec0eb659a04e", 0x41, 0x6}, {&(0x7f0000000380)="5c0f3e65c9a12cf5ad666414e8494e4f82a1afe2592c5b754e5aeb836768682defa053c6fcf4f28544775eedff639d871255e96f09bbcefe13b31299ea6fedc3b38dc15a", 0x44, 0x3}], 0xd0400, &(0x7f0000000480)={[{@nls={'nls', 0x3d, 'cp860'}}, {@nobarrier='nobarrier'}, {@umask={'umask', 0x3d, 0x46ef041b}}, {@force='force'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='net/packet\x00') ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f00000006c0)=0x2) 06:42:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xd, 0x1) 06:42:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "811f037e"}, 0x0, 0x0, @userptr}) 06:42:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000300)="43d6552283cb4b6ba37b03e8187c9b2c9138e8a887103daab673") mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65940000000000000069723d2e2f66696c6530"]) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000440)={{0xa, 0x2, 0x101, 0x7fffffff, '\x00', 0x1000}, 0x4, 0x200, 0x6f, 0xffffffffffffffff, 0x5, 0x4, 'syz1\x00', &(0x7f00000002c0)=['/dev/vcsu\x00', '^n--%%/\x00', '@$\x00', '!\x00', 'threaded\x00'], 0x20, [], [0x1, 0x3, 0xfa, 0x5]}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x4, &(0x7f0000000340)="0fb4625cee767ca30f2bf88b4e6c9b0930fb82a4acb513a411745130ece5d4a13db5") 06:42:38 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) [ 372.959997] nla_parse: 9 callbacks suppressed [ 372.960008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:38 executing program 5: r0 = socket(0x2, 0x3, 0x1) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) 06:42:38 executing program 4: socket(0x22, 0x0, 0x1f) 06:42:38 executing program 0: r0 = socket(0xa, 0x4, 0xfffffffc) gettid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4000904) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="5e21125d6357e0b99463c9d39d725b011eeb4da06953432c858ae52aa48a783bbcf6861e73cba60d9e40f8ca8845d2ef3c8eb0c5f2c7653ea02fa20deb26eef3e6c5bd26d9ca9f282dc1faa95e705b6379ddccb023142de68123dc05eb5ffcd61d066fad5631640107af2f6ab22a4ef62b66f5a6a6f1484bd4534aac7afb9f8bb22240d6abec05dd328134da523d3d0f") ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x0, 0x0, 0x9, 0xffff, 0x0, @dev, @private0, 0x20, 0x10, 0x0, 0x1c6}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000c80)={0x0, [0x2, 0x9]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000d00)='team\x00') ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000f00)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, @can, @sco={0x1f, @fixed}, 0x7, 0x0, 0x0, 0x0, 0x13, &(0x7f0000000ec0)='bond_slave_0\x00', 0x3, 0x4, 0xfff9}) [ 373.147504] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.167994] overlayfs: missing 'lowerdir' 06:42:38 executing program 4: r0 = socket(0x2, 0x3, 0x1) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) 06:42:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:38 executing program 3: ioctl$CHAR_RAW_ROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000480)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) mount$9p_fd(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x40000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap='nodevmap'}], [{@subj_role={'subj_role', 0x3d, '-'}}, {@obj_role={'obj_role', 0x3d, '&@&'}}, {@uid_eq={'uid', 0x3d, r3}}, {@hash='hash'}, {@measure='measure'}, {@smackfstransmute={'smackfstransmute', 0x3d, '@'}}]}}) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000180)=""/97, &(0x7f0000000100)=0x61) 06:42:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x20) [ 373.294791] overlayfs: missing 'lowerdir' [ 373.310718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:38 executing program 5: r0 = socket(0x1, 0x3, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:42:39 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="10028c466808", @remote, @multicast, @dev}}}}, 0x0) [ 373.351273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xb574968b376b267d) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a3", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:39 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) [ 373.474739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:39 executing program 0: r0 = socket(0x2, 0x6, 0x0) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x70}}, 0x10) 06:42:39 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffd, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:39 executing program 4: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) [ 373.586244] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a3", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:39 executing program 4: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000240)=""/23) 06:42:39 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000180)='./bus\x00', 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendfile(r3, r1, &(0x7f0000000100)=0x1, 0x9) [ 373.737381] overlayfs: failed to resolve './file1': -2 06:42:39 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x81, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) [ 373.811603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.879588] overlayfs: failed to resolve './file0': -2 [ 373.921736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "aec4d6", 0x20}) 06:42:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0096236781492e12defed05d3eefceeb04f2b0da035e2d836aa91f1780ffe89361db776be690f3ec654b"]) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000180)={{0x4000, 0x0, 0xb, 0x5, 0x3, 0x5, 0x7d, 0xff, 0x0, 0xd0, 0x7f, 0xc0}, {0x0, 0x3000, 0xb, 0x0, 0x2, 0x3, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x8, 0x5, 0x22, 0x7}, {0x1, 0xf000, 0x0, 0x0, 0x1, 0x0, 0xff, 0x4}, {0x0, 0x0, 0x10, 0x4, 0xd, 0x0, 0x9c, 0x1, 0x20, 0x3, 0x0, 0x3}, {0x2000, 0xf000, 0xd, 0x38, 0x4, 0x2, 0x1, 0x0, 0x6, 0x1, 0x78, 0x40}, {0x1, 0x0, 0x0, 0x0, 0x40, 0xff, 0x0, 0x66, 0x0, 0x0, 0x7, 0x81}, {0x100000, 0x10000, 0x9, 0x0, 0x0, 0x81, 0x3, 0x9, 0x1, 0x18, 0x80, 0x9}, {0x0, 0x4}, {0x1000, 0x1}, 0x2, 0x0, 0x4000, 0x40040, 0xc, 0x1101, 0x2000, [0xffff, 0x5]}) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000400)) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 06:42:39 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000180)=""/95, &(0x7f0000000000)=0x5f) mkdir(&(0x7f0000000240)='./file1\x00', 0x4) prctl$PR_SET_FP_MODE(0x2d, 0x1) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) fallocate(r1, 0x40, 0xfff, 0x2) 06:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a3", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x9c) 06:42:39 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = accept4$rose(r0, 0x0, &(0x7f0000000100), 0x41800) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x200, @bcast, @bpq0='bpq0\x00', 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000240)={0x62c00000, 0x9, 0x1, 'queue0\x00', 0x2}) 06:42:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x7}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = accept(r0, 0x0, &(0x7f00000000c0)) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7570706572646972812e3f354f17723d2e2f66696c653000"/33]) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f00000001c0)='./file1\x00', 0x4) [ 374.297882] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:40 executing program 0: r0 = socket(0x2, 0x3, 0x4) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) [ 374.388486] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 06:42:40 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000001, 0x810, r1, 0x0) [ 374.467197] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a3000500", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:40 executing program 0: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') [ 374.603071] overlayfs: unrecognized mount option "upperdir.?5Or=./file0" or missing value 06:42:40 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x1590c2, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) [ 374.691221] overlayfs: unrecognized mount option "upperdir.?5Or=./file0" or missing value 06:42:40 executing program 5: getrandom(&(0x7f00000000c0)=""/230, 0xe6, 0x3) 06:42:40 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000300)={0x80000000, 0x0, 0x0, 0x4, 0x0, 0x7fffffff}) 06:42:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default}) 06:42:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a3000500", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:40 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x110, r1, 0x0) 06:42:40 executing program 4: syz_open_dev$char_raw(&(0x7f0000001100)='/dev/raw/raw#\x00', 0x1, 0x400) 06:42:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x14) 06:42:40 executing program 0: futex$FUTEX_WAIT_MULTIPLE(0x0, 0xd, 0x0, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) 06:42:40 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x440c2, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x3) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={r1, 0x3d3, 0x0, 0x2}) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f00000001c0)=0xfffffffb, 0x4) eventfd(0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x80080, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8, 0x11000) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000280)={0x3, 0x40}) 06:42:40 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f0000000080)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$CHAR_RAW_FRASET(r0, 0x1264, 0x0) 06:42:41 executing program 0: ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) clock_gettime(0x6, &(0x7f0000000080)) 06:42:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a3000500", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:41 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @null, 0xee01}) 06:42:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r0, &(0x7f0000001900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000001980)=0x80) 06:42:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a300050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:41 executing program 4: r0 = socket(0x2, 0x1, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x2001, 0x0, 0x0) 06:42:41 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000018c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9511c6", 0x8, 0x0, 0x0, @remote, @private1, {[@dstopts]}}}}}, 0x0) 06:42:41 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000340)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 06:42:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @qipcrtr, @hci, @l2={0x1f, 0x0, @any, 0x0, 0x2}}) 06:42:41 executing program 4: setgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee01]) 06:42:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x9c) 06:42:41 executing program 5: 06:42:41 executing program 4: timer_create(0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 06:42:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a300050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:41 executing program 0: socketpair(0x2, 0xa, 0x1, 0x0) 06:42:41 executing program 5: r0 = socket(0x1d, 0x3, 0x1) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 06:42:41 executing program 4: io_setup(0xd9d1, &(0x7f0000000000)) 06:42:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x2}, {0x2, 0x6}], {0x4, 0x5}, [{}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x6}, {0x8, 0x2, 0xffffffffffffffff}, {}], {0x10, 0x7}}, 0x64, 0x2) mount$overlay(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000080)='overlay\x00', 0x8b020, &(0x7f0000000400)=ANY=[]) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x6, 0x7f}, {0x4, 0x1}, 0x1f, 0x7, 0x5}) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a300050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:41 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "d35c70", 0x0, 0xff, 0x0, @local, @private2}}}}, 0x0) 06:42:41 executing program 5: socketpair(0x5, 0x0, 0x0, 0x0) 06:42:41 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "282f8e", 0x14, 0x6, 0x0, @private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 06:42:41 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000400), 0xc) 06:42:41 executing program 0: socketpair(0x15, 0x5, 0x400, 0x0) 06:42:41 executing program 5: r0 = socket(0x2, 0x3, 0x1) recvfrom$ax25(r0, 0x0, 0x0, 0x2120, 0x0, 0x0) 06:42:42 executing program 0: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:42:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:42 executing program 5: syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x4c, 0x2f, 0x0, @empty, @local, {[@dstopts={0x32}]}}}}}, 0x0) [ 376.338800] Bluetooth: hci0: command 0x0401 tx timeout 06:42:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x2f, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xdc, 0xed, &(0x7f00000002c0)="26da4b1fbe16924e1a07ec4e7606979622becfdf82ebae03a9c94803f9c57da67e640b99904c87a57c765b569470de30ebbc6281ccf28c9cbe920d3086c87bd2a9d109c7573a43ba1a416829e7a9697f4100c57a0b7cfd95d722d6dfbb40120e0a86f7b3ec8de462bb176e5309fca0529f493b51b4ff1a875effc63e92aa52eb0782e0745c0e7674738375e03aceb2da6965bfa91c451e31fd4d3f01675a1244f78cc4362f2b065c62aa7eb8ab3ca7ba2828251fda15915c6d3da1bb62df68697a1de59369a3201ed94a548e286a5e3b8ba8123c25ea222386c9fbfc", &(0x7f0000000440)=""/237, 0x25d94cfc, 0x0, 0x53, 0x59, &(0x7f0000000180)="4ae8d07e3240e433ba088ea3f5df4effabaf105b8127a3bb5fbcc6b6f01e818f67aa7086da1e323e5dc3e9ddb6ac62e43b980c0934f76c22c61c97bb310e63214bf79e2c1ba8f184b354cca4181116a9da251c", &(0x7f0000000540)="c72b08cea480f3a984790440c8e0a1499c67813b594fb6d0d51249ade4ed23ffd862c956eec00764dfd08bf7edf95d5b79b3a2bcdf7c1faacb9eded735f14a2961a14b42caeb0a8dfcbfa36f8fe5a6a50d624ed2a4ebbdae2f"}, 0x40) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:42 executing program 4: r0 = socket(0xa, 0x3, 0x1) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:42:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000c80), 0x10) 06:42:42 executing program 5: socket$inet6(0xa, 0x0, 0x7ff) 06:42:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f000000d280)) 06:42:42 executing program 5: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640)='devlink\x00') 06:42:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:42 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x52000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000012da27431f7f360f0052a05e796fd5a90ae873bdbe9e189811d408cda4ebd73ef135725d08ced88fa363b1fdb7ae0c928b0135c299323981890387029db18e3002a9df00021580982669901a083dd400ab432b9863835e75af97213dec9a337cfb644e0ea2f41dd3ddc497a7524d9390ac473900452427ad81aea0950c102051df8519b3c05d7d262c44e3bc51efa6a23ac536979726b176a560c7e12247ee20309b2192d2c1c7a28bb3b6dff24ac0f244d823ab4b653ae79b5268f77b13a2fbe3b2f867a4c0e472b7229ca911abf4ed2f4fa9ba11d46b8c7bb3094baa00"/241, @ANYRES16=r2, @ANYBLOB="200000000000fedbdf25010000002c00018014000200687372300000000000000000000000001400020073797a6b616c6c657230000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xa, &(0x7f0000001ac0)={&(0x7f0000000440)={0x5c, r2, 0x204, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x34}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')%#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x96e}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:42 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9511c6", 0x8, 0x3c, 0x0, @local, @mcast2, {[@routing]}}}}}, 0x0) 06:42:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 06:42:42 executing program 2: syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x8, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) [ 376.837649] kauditd_printk_skb: 52 callbacks suppressed [ 376.837663] audit: type=1804 audit(1603176162.470:757): pid=19943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/443/bus" dev="sda1" ino=15828 res=1 06:42:42 executing program 0: syz_emit_ethernet(0x64, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f35db5", 0x2e, 0x6, 0x0, @dev={0xfe, 0x80, [], 0x3c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @payload_mcast={{{{{{0x2e, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x3, 0x4e22}, 0x0, 0x3}, 0xfff, 0x4}}}, [0x0, 0x0]}}}}}}, 0x0) [ 376.947568] audit: type=1804 audit(1603176162.510:758): pid=19943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/443/bus" dev="sda1" ino=15828 res=1 [ 377.033479] audit: type=1804 audit(1603176162.520:759): pid=19951 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/443/bus" dev="sda1" ino=15828 res=1 [ 377.199916] audit: type=1804 audit(1603176162.520:760): pid=19943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/443/bus" dev="sda1" ino=15828 res=1 06:42:42 executing program 4: memfd_create(&(0x7f0000000000)='$!\x00', 0x4) 06:42:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:42 executing program 5: r0 = socket(0x1d, 0x3, 0x1) getpeername$ax25(r0, 0x0, 0x0) 06:42:42 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:42 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 06:42:43 executing program 0: setrlimit(0x0, &(0x7f0000002800)) [ 377.389836] audit: type=1804 audit(1603176163.030:761): pid=19980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/444/bus" dev="sda1" ino=15940 res=1 [ 377.486644] audit: type=1804 audit(1603176163.120:762): pid=19980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/444/bus" dev="sda1" ino=15940 res=1 06:42:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f00000018c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9511c6", 0x30, 0x3c, 0x0, @local, @private1, {[@dstopts={0x87}, @dstopts={0x0, 0x3, [], [@generic={0x0, 0x17, "0da02bc9f55d26197cca95f3300c5f55100de18b255c24"}]}]}}}}}, 0x0) 06:42:43 executing program 4: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000180)=""/233) 06:42:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x21) 06:42:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 377.598244] overlayfs: filesystem on './bus' not supported as upperdir 06:42:43 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) 06:42:43 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0xffb4) 06:42:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) 06:42:43 executing program 4: getgroups(0x1, &(0x7f0000000080)=[0xee01]) 06:42:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) syz_mount_image$qnx6(&(0x7f00000000c0)='qnx6\x00', &(0x7f0000000100)='./file1\x00', 0x80, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000180)="dcf1d862e3241c4914fbb87413850eb59e19acae106069bdd088aee38259a2d873f9031cd68e3ad5ea5e91b0e24d574ce72e368b7ef10abbdf2266a16178a4d09cce1de15581ee3b0120586b3255b48d0e6b27649d9e7ad56b3c7208eb73713157f937372be2768d473364fc555527e1502de21f47c81e0ecf81f5ccac2e8602eff720c86195d38f571d8ec693ca4f4a8011a47815b80f0f81d732222e102892bcc724e8864051eb9dd1d8c160c0b37b8446bea7424c", 0xb6}, {&(0x7f00000002c0)="84bc6ba0dcc0844c320966229c2026f57248132136e6c42217355688c91f09f029370ab74f77162aa60ce8a5d7f09804dfffeb3899ad0c01fe475d9b6fdee54bf9f3e60d9d5760c2141457a05f1130ed29804b097b3b13b3972437d072fb7eb3a52f61a1a69b8c236d6fe032430b23c3bd2755b2dc5fc3c5f3d35807e7acd1b14aa86a91debbfbc1ae1c101741cde45a0cb54c8ac5f6420130967f976e5ef92695351cf788880cf707429af34486c79614decf6ce3a24a7451cd98b0cefd5ff8bd40151dcaeaf519358ec542ecd43fb47cadb842", 0xd4, 0x7ff}, {&(0x7f0000000440)="1c3975a325d07124cc0335db6fff2d03669acc9e9602b1ef0581ac701e079700b513596dc9e773f06884c3d90772ab27d1791f73b0d713926073d919d621783945fb4b12370f6de961ef93c79728000d43234ab80ad85354b7f95183f6c2b97ae93a45e9cd23ea10fc7662efbe4ec27b3f6adc39f351418650f91da29034026bfdf008221aca756b1c86557e832ec4cc329eed428ad607ae09ea5ec7582c8e611f047a4576", 0xa5}, {&(0x7f00000003c0)="f86b141553ea8485493b3bf9eee28233ecbf0adadaed6905c3913d6227d9671e79ab7b50e3", 0x25, 0x8000}, {&(0x7f0000000500)="6d61c41223a227092139ec51c96fff79d8ae26b7f7427ee0ad50092843545569e623f06ee7a98d35b8594d4a8660b5815cbf2b3ae9c7104f8f2a31343b98886aa2afb0da3ca00b520d3ecfeefce827306422fd663bfcfc0a69814f1a155510b04ce2e8d7f4a0f37ea8a575a0cf345ac108aca82e3e06ffd8c59a5cb721116276a7a2d71900322f7133734bc7a0783d3d3aa36e9493913c4a", 0x98, 0x8}], 0x254084, &(0x7f0000000640)={[{'#'}, {'!/*'}, {'/'}], [{@uid_lt={'uid<', r0}}, {@obj_role={'obj_role', 0x3d, '/dev/vcsu\x00'}}, {@dont_measure='dont_measure'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/vcsu\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@obj_role={'obj_role', 0x3d, 'overlay\x00'}}, {@fowner_lt={'fowner<'}}, {@subj_role={'subj_role', 0x3d, '/dev/vcsu\x00'}}]}) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6b4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) [ 377.797140] audit: type=1804 audit(1603176163.430:763): pid=20015 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/445/bus" dev="sda1" ino=15779 res=1 06:42:43 executing program 4: socket(0x0, 0x0, 0x0) gettid() syz_genetlink_get_family_id$team(&(0x7f0000000d00)='team\x00') 06:42:43 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000380)=""/27, 0x1b}}, 0x120) 06:42:43 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00') ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000180)={0x0, 0x101, 0x2005}) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f00000001c0)={0x20, 0x1, 0x6, 0x8, 0x9504}) [ 377.971572] audit: type=1804 audit(1603176163.460:764): pid=20015 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/445/bus" dev="sda1" ino=15779 res=1 06:42:43 executing program 0: write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) [ 377.999872] audit: type=1804 audit(1603176163.480:765): pid=20024 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/445/bus" dev="sda1" ino=15779 res=1 06:42:43 executing program 5: syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "875393", 0x44, 0x2f, 0x0, @empty, @private2}}}}, 0x0) 06:42:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 378.056843] audit: type=1804 audit(1603176163.490:766): pid=20015 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815408827/syzkaller.ogzrRV/445/bus" dev="sda1" ino=15779 res=1 [ 378.187462] nla_parse: 18 callbacks suppressed [ 378.187472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x9, 0x5}, 0x10) 06:42:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16], 0x70}}, 0x0) 06:42:43 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) sendmsg$nl_crypto(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@getstat={0xe0, 0x15, 0x100, 0x70bd2d, 0x25dfdbfb, {{'drbg_nopr_sha512\x00'}, [], [], 0x0, 0x2000}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x440800) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) [ 378.489122] overlayfs: filesystem on './bus' not supported as upperdir 06:42:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) r2 = dup3(r1, r0, 0x80000) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "c20fc3bab3225a7e", "123acfcedf6ccd3cf50b4d80ef73e9c4", "13fab069", "448562e53e1a7c20"}, 0x28) umount2(&(0x7f0000000280)='./bus\x00', 0x0) 06:42:44 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 06:42:44 executing program 5: syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x0, 0x4100) 06:42:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000100)=0x8000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) 06:42:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:42:44 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, 0x4) 06:42:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000540)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 06:42:44 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) [ 378.634670] sctp: [Deprecated]: syz-executor.0 (pid 20097) Use of int in maxseg socket option. [ 378.634670] Use struct sctp_assoc_value instead [ 378.661551] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:42:44 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "8360861ee01aa1994fde6822b9e2d8f5"}) [ 378.759290] dlm: non-version read from control device 0 06:42:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f00000001c0)) 06:42:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}) creat(&(0x7f0000000040)=