)="6229a0e35385f025f97adedd43149932bfb6f5e20f39a0ae63aac2748539d250d67348d6f8bea5281e46b9345b5f8093212bfb2a94282aaa4938d41e3ae85be63bc6116945f5785b983c7dadffc7aed791308fda5846e2f1086219fa087f6ca8bd6fbad06790de872920e7e32ba31c57fdd43fa7a6073962a035874d43906181068510089eee4c1548d0b864cdbcb117193af913c68d0ba46c02db2492154504d2", 0xa1) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x80021, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000240)={0x10000, 0x20, 0x1, 0x3f}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x10000) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:04 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1846c5d2c2f823152721db9d0800000000000000e3c79fec189e8d9c5cc92fbad9a61f66eee09e12556107dea5ff9905460363dff6cc374fa7b776f10fb363c24185f0377a09000000cb2fea3f30c0a3f4217d5000"/99], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8c00, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000000)) 02:38:04 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8402, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0xb, 0x6, 0x7, 0xfffffffffffffffc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x8e, &(0x7f0000000200)=""/142, 0x41000, 0x0, [], 0x0, 0x14, r0, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x5, 0x401}, 0x10, 0xffffffffffffffff, r0}, 0x78) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 02:38:04 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x404000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@any, 0x1}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r28, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:04 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r28, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="7b826abcdecb357db9d948b101cc49741407bf1979c7e5186c8f694ec2c29774fd265e398a129163a127a58cc5fb7c5fdd71c7fcee2bf6a7c9f84bdb12a9fa0be1c0000072696c5c6630"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0xa00, 0x1) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2283, &(0x7f0000000000)) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC=r1]], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000008, 0x10012, r0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000300), 0x0}, 0x20) 02:38:04 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="70ae27ca9b3c0d46f807fdb8609948"], 0xf) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x1f, 0x4) 02:38:04 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:05 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x2004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0xc896, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffc}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000200)="eda9ef21c9e71c0f2ff9e98122d1c927131b0219ef524fe0bcf6f456cbaaad5dd87189421a5b2d01e03f9f75b62f4fefc952f90856df08cc5421db00597792295e675a9e6f15921ea13895de3002033b720ee04fb2b0edd5f2a8b704477e48d790029c", 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x0, 0x100}) 02:38:05 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000240)={0x0, 0x8, 0x85, r2, 0x0, &(0x7f0000000200)={0x980918, 0xcd9, [], @p_u16=&(0x7f0000000180)=0x40}}) recvfrom$packet(r3, &(0x7f0000000280)=""/225, 0xe1, 0x40000020, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="82ed6c7d06fe4bb3814f1cc8fedb0bea49e096dca963a08364f7a1494b90d6e2b5b3ba2753b5d3883f215acab0c462874cb5593b089b317b04edb348b493afe4030017d37fbb0dfd0249ca9d"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)) fsetxattr$security_evm(r4, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@v2={0x9, 0x43, 0xd, 0x0, 0x26, "e6c4b29671e58d27f51acbb634a598a85e32a5f78b3cfb457996c3bdeb97b4f7e649a18381f5"}, 0x2f, 0x2) 02:38:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x2, 0x1, {0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="33f06d397586f7a3bfc085cb370eba3027d2c3a904387694af29b5f7868ae8920455eb3978478c59bf288bd2bdc242dfa6ca1ab699813329db94c3dbd48505cafe5f911419580cbee893ebbf4dd0a9456671918d2b073edee42507c2f0d9e215020931069794fb3ff04313c05287536d6c77f6fe8c33e6ebaa2e76540f87c38145c327323f9b0dcdd110b1ee85a2f9d92bfc4ba3783a3e5a4ed8eff389968f329761a6994c955ef4e930ff222d008ff4af344fe981eea58bc687713499167472910f745b58d1958348487503c07675b2f3800b28643bc389e8e3b646d7b6f2ffa47e607cba4407532dc5d425c2cce68fae0607bb", 0xf4}, {&(0x7f0000000300)="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", 0x1000}], 0x2, &(0x7f0000001300)=[{0x28, 0x119, 0x10001, "e29a443c9197c2af4a5fa9fa7cd598381e45"}, {0x1010, 0x6, 0x0, "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"}, {0xe0, 0x10a, 0x4, "aef29d3a91460c2067c25ac8a03341e7a1d1540556ac898aab1614bceffe1b098b490303130141bf754383418c4449ae069b6583f17534f14c66bb48cd3820af03615c5cebd42e7953e1824c59eee768dcb28ee13f54cb331d15b1a85fafa7c39e1503168dff1dd0c413b29f5a8aed82a72975a49a6c2976d59d6f33505dce5fb62361ba045989fe53606e64467b09192a354fc62803261cb9c7d849419db2b82a758fa4a98496ff9ead40a79743dfe4222e4cbd42df7ce6d5bc276e04f716c743f2d94327d587b5514b8c"}, {0x60, 0x3a, 0xaad, "da6ac4aea289cd48c1b332897b1fa8b0302aee67ece689ec7ef2127093130051dfeb195f0922d685f0b9118d72392c5bc6dbf7d988b34836fdd5c8ddc2ce82975fc4fd736f3cacf2660a77fe1dc508"}, {0x50, 0x102, 0x1, "a0f87ed9066f5fd0d3b3fa20991d233615729eab0733c8cdb247773199820d6dfe1c1e066ac41de18165f0accd09658ae1fec72c7942150f6476a272455517"}, {0xc0, 0x105, 0x10000, "ab01a2f0a3c21fca8ed63363ad1980b70c54717a0417cddca912aef4539b205194ab65a42db24da38184b4963e022bb997aac2bf36866b4192cdc7f061ffe97ffb7cf9bd3eb8ae5dfde1e96ce5dabe53bd674fb3da22cfff4002a9104b5cb73fe3ba6bf05242008a1bc2036465b56286ee681a5418e8d54b934c6f49647a7fdfbfd2377314d9a5665d2cc03e48f91fbb74cfed4651423dfba404214a1dc2f82172326c4fdf0f153b6037b6bb0ecd"}, {0x110, 0xff, 0x6a16, "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"}, {0xa0, 0x1, 0x6, "9f2fa102c0046666f129da193606c1a75b92df42b2a5141878ec3654cdf7f45c45b054a8765be66161209a32444973855232acbe314b751c91d5dd86d4e4318f556f5942b1d9b927960ae2a5103f13ff25b55472495bc5b7d90d187d3e53c8c55f9c3349f14c666d185259c9c6d1f37f080ccf3f4611dc90a1db426312f931d61e1bb1cbb12ebe88d41fb672c60f6fef"}, {0x88, 0x117, 0x0, "106ec7e652aee1f2b9d764a05dd16dfe9c91fa1ee9029ed26045e8fc19d19e2bd3230d4a235812a22fcbe09f4f9625b7bddcdb7cdaa50e88d104d9529084be7ffb03f6a99382dbebaba5fe0a6e6fc059459e71db61deac84d61f7b23cc6c407325919a22bca7995da3decc6effa99bc1053160ec26"}, {0xd8, 0x10e, 0x1, "86ec7280d13108f99ecfdae7b7c75f353be558c6ff63433b54c69009ad12a16f2fcfe3ea5032a8e83c79d25ab9f071a1ea2e18e8dc084187a7ff33bab0defc78c3c2f754460892de16890e6d02cb9017a8ea56600d253feeac4cb3387926d4c0149acd746e6156a92fde55b7f03374c2354a1c1da231db28d4410af57d82324651f0558d475b1ed47ae92c05c8c145ac5f7c4ec4ef9ae7ae621654f55b8716a8295670675b218b0dc037f0bc88f0280a9bb3eb561c3cc5c7c744f913c60129f77f01959e27904604"}], 0x1598}, 0xbaba5e1a0e66897c) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000300), 0x0}, 0x20) 02:38:05 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000200)="53ff3b48cb1928e9a0ab2948197d9d038d41a7f30e28ab2dd1d9765e0753b460a3dddf7c66cead972289800bbf2d9a123aad4618a07fb66d1d41421661088e38c02202a44545a0a0440c5eb1c5d4086cfbf4d4007787e24d6270890b4cf028abeddba4b1dfaf3d695a71de2cdb5fd62d67441cc32f9fd2321be0f0964d4c51a7eaea78646ebf385d1138d1debf1f345c53099ddecd56fd77ec7aacd35e2c6d400037e2c8db30a6c2929d41d61a4800b9", 0x0}, 0x20) 02:38:05 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r28, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:05 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x29c0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x400, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r0, 0x2, 0x4000}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000300), 0x0}, 0x20) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000200)={0x9, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @remote}]}) 02:38:05 executing program 4: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x6, 0x1, 0x3, 0x10000}) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) 02:38:05 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r28, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:06 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {@fixed}]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x2) 02:38:06 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40402, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:06 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:06 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x401, 0x51ba40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)={0x6, 0x0, [{0x7fff, 0x2, 0x0, 0x0, @sint={0x8, 0x511a448b}}, {0x7, 0x4, 0x0, 0x0, @irqchip={0x8000000, 0x12d}}, {0xfc, 0x2, 0x0, 0x0, @sint={0x7, 0x2}}, {0x8001, 0x2, 0x0, 0x0, @irqchip={0x1000, 0x6}}, {0x0, 0x3, 0x0, 0x0, @adapter={0x3, 0x9c, 0x8a, 0x3c, 0x320}}, {0x7, 0x1, 0x0, 0x0, @sint={0x8, 0x10001}}]}) 02:38:06 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101080) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9fd7f07ac3"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000200)={0x990000, 0x9, 0xa3e, r2, 0x0, &(0x7f0000000180)={0x9a0913, 0x0, [], @string=&(0x7f0000000140)=0x1}}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r3}}, 0x18) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000300), 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 02:38:06 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) 02:38:06 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:06 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:06 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:07 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) accept4$x25(r2, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x3, 0x7, 0x9, 0x8000, 0x53b, 0x9, 0x81, 0x9, 0x3, 0x2, 0x2, 0x3, 0x1, 0xffffffff, 0x9c0], 0x6000, 0x4100}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:07 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$getown(r1, 0x9) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = getuid() stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0x0) setpriority(0x0, r7, 0xffff) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = getegid() r11 = gettid() r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r13) r14 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r14, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r15 = msgget$private(0x0, 0x0) msgsnd(r15, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r15, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r15, 0x0) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r14, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r15, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r17, r18, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r19, 0xffffffffffffffff}) r20 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r20, 0x2283, &(0x7f0000000000)) r21 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r21, 0x2283, &(0x7f0000000000)) r22 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r22, 0x2283, &(0x7f0000000000)) r23 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r23, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r23, 0x0) r24 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r24, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r24, 0x0) r25 = socket$bt_cmtp(0x1f, 0x3, 0x5) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) r28 = socket$pptp(0x18, 0x1, 0x2) sendmsg$netlink(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001fc0)={0x15fc, 0x12, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic="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", @generic="2aba2101a9cfe85b067df572b493e899264527ec0bc840930b75710d4e38fd117f236accbdb2f7e4478d1c694df95e1b90f4837639f4d3ca832e18aa5350b8d348889eb4dd043cbcfa393143ad0bdbba68fc6a89d495d4287f693162e4bb09833e0c8760da42b9728bb8467bd51082f334f872b08d6768", @generic="6e228c7ed346d939a7c9a63c", @generic, @nested={0x2d0, 0x26, 0x0, 0x1, [@typed={0x14, 0x51, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="fd6c5c97388ca5590ece31a3e9c6888206ea801caa13fb137eb2a2944b3c8983ec62b426262e3ca43f3d1f0f3014b92a7f416a7515fab11bc41d9f8b0b67e3eb7d6c796ece15ab5bf0fa560618e6090d7a3252054f118e6b387b9aa17ce37b9608714a5c8143650a9434537034ac3ec3472ba5b495250aa6232ca27c1c94b3aea9af36a6aa6ed09b5f24011a6b83199f298fb3b940ead1faa76e6c89e3752f8fc47dea73cc46500b32d197532de4d4a8ff589da7c0eeb6870a856a0b9f03a6d167ad706a02e85a7ad3025a5c", @generic="caadbe52b66648a5d9f18e3d858a214960a2212c69d145d1b6a01fd29beeeb81f9996e27d2d28689f0c1e00346e9abef61006685652f5cb30efe8f9b8c8e8f3a0c34b0c7d94baaf4f66e28a54b24416118328b7feec03e21064be4f3012465ef5b37c0a4e762aa1501b5a546ab7b9e37e645b85f967f6e7345430a9cac8aab0134d7fbf459c9efbd01e47299959079dd034f8bd9627949ab898b192225643a0439ab2efe17ae03c35bbc2edcd327dc94245f7ad7f910b27ac1586d2fbca9b53e35ef0d7bd7a318a15288a23087a0528b31c4ecbd9effce7cb504cf9a033422385207ee370c7575153966394f8dc6e278bc42269ec594", @generic="1a15fadb19ed3ca3e2e6d0da36c09b525e1b8f76c6e21e55e63eb3d52ca03d79a475bd552fde710133eaa9cb1daf4a0e739b5903df9bf65db3016a915ca71c5e18414934a8cd67f9e43f730dc50a9e6d818947e10763a0bd0069a8398ad9125df4aa35146db1bf355e0bc427b8667ad0cab090deb8ab2f06a38b525cd02811a3dc663b67ec3d01ee6d24f0a95c56f4883389995fad6877fea134932ce66e48cccf1616835b19fbe3eed0a88476745d2a3b2dad6e61eebdf09c5f542546eaa80298db3e0ce7e0071465c9f0ecf4c2cd3edef8f93a248da1bba1697b4aec4e74924ddea9496ea960056416f20db08d3ab4319f7016e6af"]}, @nested={0x151, 0x70, 0x0, 0x1, [@generic="3904a6bfe7e7da33ea9e72d923bc92176fcc9ce552188c7b49075bfa765f35fbf9df8248e499f8f3bffe9ae4e710fea0cb5f6d367f1e5e75116eba7ce00bef87e8b344f6b551a92b80122f27e3834de9384e9fcea755a976f52084716fdbe6dc06fe2e4d7c521f0f8230b304eb3230c035b61161568b75966c8a1d1bf09c4c7eca39a4", @generic="5d24e35919d384e0ac2413db9e0155f38a20051065f317ce1527efe774acae680eded7db65b6f475613ac4bd312e6f6ebf68c2977aa80f2f2fd2d45149f4b04047b7cf5bec5ea7df87b9ab1ec74dcdc4606f5b670710497aa484e625c279b695c34439aa4f5804e77339c34badaf913d796c575c17c5ce53c4d450ebe9646fc269fabc13363cd8498dd060cd28053abfe1ebe56460ca4752793ccdae028cf3cef03093eb59e39da7e7d54e84114634a238f7c23cb49fb4821333c303b17425b62bd4eb27a721b62f98b5"]}, @nested={0x141, 0x1a, 0x0, 0x1, [@generic="d774f182b47830e0369072e28dff51adbe2453148c2f274cb0bfa95779a9875f9ea7b8454c00569245b69990b74aa02c1ac19657cadf5cbaccffb73215cd1454f27ad58341c8004f2aa47de67d5faf1d8b8fa5751556a198b8e93859612a89cfeb83f2903934", @typed={0x8, 0x70, 0x0, 0x0, @fd}, @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={[], [], @rand_addr=0x9}}, @generic="82761f6e1b6ace53bf2e9b8039c2f0e0b48652f37cc226c20edb85c4c3e7b0e56515cf18175675b167e28ecf2aabd5adb2a33fc2408d9ec96e6aa3f66f19dd7e077da6c146f0557fae8a755d27afe985fcf1e53e2498fae27c4474c770707baf6cd114dc5fb3d1ba1020576ef78700dc690f2c06cff6ce33735a449a41f37ae7918be942c2fb4a8d406d38ae8423e74a4aa49067784a53be0cdd3764ab7668000033799ba6d189e05eb74ca8740adcccfb269b"]}]}, 0x15fc}, {&(0x7f0000001800)={0x35c, 0x21, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0x33}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}, @generic="b7de278071f9b483a97007594f96af6228fbdd74cd2a430709af0aca39610ad1ccbb28998418386b95d0552f8b84ed9d093fa284875b5d9682224e96780c028cc60b7bb70cd1c3bcaea0d0019378b4af532f9a063cb5c3ecba67c573c38be72039b9b45287ce60828d3580b4a02c5e1bb3d79306459cc1c03903f9e9e5cce0b337306b2c8ee6a8aa5e6a30149fe3165a1650e26c653d33567f800bc37c35004d128b718765407528902a9849cf9e87a2dae77ce524ffea59127bab0d56708102ee8f7f628fa821e9a9335b3bea", @nested={0x1c, 0x92, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x800}, @typed={0x8, 0x4a, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x8}]}, @generic="7997ac1498f47f292bca51bec5fad32519f02b284b07194a11c067b9cc9659dfd620286d53e082bd729a951e9f41b27d1527d19eb771c1f0a0b7359009cc9ad0f9838f63245a980b9b87a0f413c8afa1ad266cc2ec5f562cf05dcf94b9b1d2e7ef946afb6367d5fdeece9df803d373cfc7df5575c774bbcbefb43cfb2abcf7c151a4771ee15092a3b5c1c2b4dfe17b8171e585c225901f097cf6970c1ed531e6d8f6bd2b69f08ee2e7376f817f17f85913e5c98ad001e2", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x8000}, @nested={0x24, 0x73, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0x9b29}, @typed={0x8, 0x54, 0x0, 0x0, @u32=0xda4}, @typed={0x5, 0x19, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x16f, 0x9, 0x0, 0x1, [@generic="1ebbb62f37d425a36fe84f36009d558e911b4c70e1fe2b80dd243e98c631d59ca0ba5d1a4a825d546829ee679db161b7e396544d8f45f8a84d635e5e03d6214a36b98a9a34f90dd95ef312ddb9bb509394e8800e69849ef2278e58616dd01ef7f94fcf186171d78a91a2", @typed={0x8, 0x18, 0x0, 0x0, @u32=0x6}, @generic="151fc96245e3f5365e5c7fe260190712af717ef1bfef65756cef3520435775c6bc5c91159da4d61e2c77945b5a6a4f1c79de8b9915770c1b687971a4f86265bfa4ae9425cc9f7982cc3e335e31026aec3ab071e8f37c3a5cfeff312e3dc3e982636a59fcca4be115a68a24bd1f184663355c226aea31d6bf4b11b1f6037c26a4e1bdb9043b34093ff3f597cdfd9f1898fca5dfa59e48d324e8369e4a581da0518cd6a4758c0fd7ae111c0a436281ca10a316ac5a56da29ee04318c02e167fe4ac6f9ab63c0", @typed={0x4, 0x50}, @typed={0x23, 0x4e, 0x0, 0x0, @str='cgroup%\'selfo@{em0ppp1&$:eth1@\x00'}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x1f7789a0}]}]}, 0x35c}, {&(0x7f0000001b80)={0x304, 0x37, 0x300, 0x70bd28, 0x25dfdbfc, "", [@nested={0x2c0, 0x56, 0x0, 0x1, [@generic="13654509f82718a3a000cbdab4a9dd7e17298850a8b30c336b3c12af745fc01c19ae590560b9c1408bf0cba730201c5127fd00abd0f2cca14c25273e813cafd5f199e9d64e56827f57e6b66a1c3a0c46d5da91009a8ec564a205fd8e3ab6c679cca186d727a8d07e59bc466cf1df6410e42353e48a0a01b85e9b09855f44ea10252e3c2a6b289a1d28087f3c707f3e22c3c0efd3865370babfc08786f1d37f80637372d39f5ddb1091c6d58af22eeb6a0a44931075de955e6ba1bb8803d5a8a5d7bac218de78e8bebc09bac32f4e9f2a0b202e830afe05a1fa5a6258325cf594fe1b0a5ddc54c235d2a065", @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x12, 0x63, 0x0, 0x0, @str='memory.events\x00'}, @typed={0x8, 0x78, 0x0, 0x0, @pid=r3}, @generic="4909e0e8cda0d655777318a821d9974dd9a167d7c298998df5205f666b75a160c619c5a0c04d7ae234229b53c28806f3684a63f1c61a393e75129d7b82fdf81e606d50dea4e041ea36ecb9cc3b5d05f2e843ee1d2b3df11506e89f7a896bc7bbbc9ad012c4533981dd22ce55c267ce7ac2c750536158b6dd6c1bde90241329142f4cd05e3403f08ac3c5f43de34374886ae7a0ff79f65f786cebac915a", @typed={0x8, 0x91, 0x0, 0x0, @fd=r1}, @typed={0x12, 0x55, 0x0, 0x0, @str='memory.events\x00'}, @typed={0x4, 0xe}, @generic="929c4b2b2cf1121135db0010f3d76bc003493f94067f410e519e860ebceacfbe74f5b75f896bbcbad8e94b0c7b5f97c32dbe29bb72eb840ead32bd905cbc8e66b7c853e7e1ea2b963afae7f709e1941f276e5c34c66a166ba0a592e0f47a1c8ba651ec3fe014f5625bb14e388e48792c947bda2ca7f33325179aa4995067fd63462f8e31645b721dc43e", @generic="9990f11986fd9d90e3b3eb1e3d478e19120793706c550c14e0e4d8514e74282b1ac7f81cac44e7266079316d8d6d9f8cb7fe1b781eea77cc192ddb0b14fa7cbc2b4a9d1be5b3c1cd45b15392dfdd07439bc0d0369b5bf436dcca"]}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x12, 0x3b, 0x0, 0x0, @str='memory.events\x00'}, @nested={0x4, 0x81}, @typed={0x8, 0x5b, 0x0, 0x0, @fd=r1}]}, 0x304}], 0x3, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r18}}}, @rights={{0x1c, 0x1, 0x1, [r20, r21, r22]}}, @rights={{0x30, 0x1, 0x1, [r23, r0, r24, r25, r1, r26, r27, r28]}}], 0xb0, 0x20048001}, 0x804) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:38:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 02:38:07 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:07 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x4021050, r1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000000)="9cf5e848f092c0eb7ecb062bd69210b29c895ac6f013eb7618c8ac107a49ffb7a38e00ee5bb5aa3ed68286f2f5d06e8dc30b7792a5c96da5040f66d436d893b233654c7e333a8861f43fd0aa67d7e1594c8018e884a9466f657dc47f625618dd6457665730b0e6648fc5bc2554bddbd23df3220cc777bc6308c3c9900436004b997a950694c5842dd5fd4995f589da25abde6c6554a94ec6ea264778f35ae38c9f8bad49a57feb"}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200000, 0x100) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x40) renameat(r2, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00') ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000140)={0x19, 0x18, 0x5, 0x14, 0x4, 0x3ff, 0x2, 0x160}) 02:38:07 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:08 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x5, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x5}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r0}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffe, 0x4}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004805}, 0x24000020) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r5 = getpgrp(0x0) setpriority(0x0, r5, 0xffff) r6 = getpgid(r5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r8 = getpgid(0xffffffffffffffff) r9 = getpid() clone3(&(0x7f0000001240)={0x440a4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xf}, &(0x7f0000000100), 0x0, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[r4, r6, r7, r8, r9], 0x5}, 0x50) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000100)={0x2, 0x4}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 02:38:08 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:08 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:08 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x19, 0x4, 0x4, 0x3b6c, 0x3a0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x3}, 0x40) connect$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/ubi_ctrl\x00', 0x488002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000d00)={0x0, 0x101, 0x7, [0x5, 0x0, 0x95f3, 0x4, 0xfff, 0x9, 0x9]}, &(0x7f0000000d40)=0x16) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000d80)={r3, @in={{0x2, 0x4e24, @broadcast}}, [0x8000000000, 0xc593, 0x3, 0x3, 0x1, 0xf22, 0x0, 0x6, 0x7, 0x2, 0x6, 0x660, 0xed, 0x1cd, 0xe14d]}, &(0x7f0000000e80)=0x100) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2004, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:08 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@broadcast, @initdev, @broadcast}, &(0x7f0000000100)=0xc) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x40080, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x9d, "37932516cc691b2a9bf2693c2c6a8f405a828efa0fcdcb10d2f4af73fabd004956172136ceeec8157edc2eb09cd6a3a9d61d03290fbe2cd1fe1d7bc3944d146eeec24c44a20f6fe46d27a8c1325334babdafae8dba04e6b96ae936ee7374597d2338ff2121cfe0cba45694234c23ae2d5d8ca93c0ec58c8a1cd12828d5b62767ab95ce1ca3829b7b0ea1f5a657e7ab3ffa2d1fd9e6c044be3c0ffc741b"}, &(0x7f0000000180)=0xa5) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={r4, 0x9, 0xa, [0x9, 0x920, 0x200, 0x7, 0xffff, 0x20, 0x49, 0x5, 0x69, 0x80]}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:08 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) getdents(r1, &(0x7f0000000200)=""/211, 0xd3) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2283, &(0x7f0000000000)) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0x8, 0x7, 0x4, 0x800, 0x80000001, {}, {0x1, 0x2, 0xff, 0x8d, 0xe5, 0x1, "cafef058"}, 0x20, 0x1, @planes=0xfffffffffffffffe, 0x2, 0x0, r2}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x480, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 02:38:08 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:08 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc000, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa573}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004}, 0x240400a4) 02:38:08 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt(r2, 0x200, 0x7ff, &(0x7f0000000100)=""/115, &(0x7f0000000180)=0x73) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:09 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:09 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:09 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:09 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:09 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101040, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x21) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r3}, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000200)={{0x4, 0x2, 0x10000000, 0x6131, '\x00', 0x3}, 0x0, [0x2, 0xe47, 0x7ff, 0x4, 0x3, 0x100000000, 0x3, 0x1000, 0x5, 0x200, 0xa35, 0x7, 0x800, 0x2, 0x1f, 0x5, 0x80000000, 0x9, 0x80000000000fff, 0x9, 0x1, 0xffff, 0x700000000, 0xa58, 0x10000, 0x8, 0x0, 0x8, 0x4, 0x9, 0x200, 0x7, 0xda9, 0x200, 0x80000000, 0x81, 0x8001, 0xfffffffffffffffb, 0x1, 0x80, 0x1, 0x9, 0x100, 0x4, 0x100000000000, 0x74f4, 0x6, 0x4, 0x229, 0xce7, 0xfffffffffffffffc, 0x0, 0x9, 0x7, 0x7, 0x8a, 0x0, 0x1, 0x0, 0x1000000000000, 0x3, 0x8, 0xde, 0x9, 0x9, 0x100, 0xfffffffffffffffd, 0x5a841b98, 0x81, 0x7a, 0x8, 0xfffffffffffffff9, 0x5, 0x2, 0xb4e3, 0x3, 0x3, 0x82, 0x1000, 0x1000, 0x8, 0x1, 0x8, 0x4, 0x7fffffff, 0x2, 0x100000001, 0x3a6e01fd, 0xd31, 0x8, 0x40, 0x2, 0x8000, 0x5, 0x7f, 0x10001, 0x8001, 0x0, 0x7fff, 0x3, 0xb8f, 0x7d64, 0x41, 0xed, 0x80, 0x8, 0x1, 0x1f, 0x9, 0x1, 0x5, 0x7ff, 0x81, 0x3, 0xff, 0x10001, 0x20, 0x401, 0x81, 0x9, 0x8, 0x41, 0x7fffffff, 0x1, 0xfb2, 0x1000000000, 0xc4, 0x3]}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000100)) 02:38:09 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:10 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000080)={0x0, {0x6, 0x7fffffff}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x4, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x7, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r2}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in6}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000300), 0x0}, 0x20) 02:38:10 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:10 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:10 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0xa579, 0xb80f, 0x7, 0x2, 0x1}, 0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 02:38:10 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:10 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:10 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:10 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:11 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:11 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:12 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:12 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:12 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:12 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:13 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:13 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:13 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:13 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:14 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:14 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:14 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:14 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:14 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:15 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:15 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:15 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:15 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:15 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:16 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:16 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:16 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:16 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:16 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:17 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000200)="2b50185635d1451927b99ddd2a2f83cb003ea72fcdacfb595c63c1bf62f0070a079c3b8b7130d0d0c716ce03dde46f11eb2124907fe67a81f6432039deec0c49aa7400a678fb8c9219e1090477846c5440f136166cb33eb89b2eec41870736632351834a46a808f1d63021487a48e1194f756693ab0331503bda44070f342bd6996d29226f57031328125b6f1ec73427a71fc23982cd16d24478cb23e1f79c02a58b4bf4147a3f95cacc2fe4f90626085de33a5161c6d8631ecce7376c6db354edde100436e9b18f66aa9527c188adeca05a60982286fad4949a3a9d22029f49bd0672665463edf538c9eab2404283cc86a1c9d88575fd90e7", 0xf9, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000380)={r1, 0x2e, &(0x7f0000000340)=""/46}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) sendmsg$nl_netfilter(r4, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x2, 0x201, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1010}, 0x40001) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000100), 0x0}, 0x20) 02:38:17 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:17 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x1000, "d4764429f27baecbd2e14a5b48fb66168d139941810cc64ab458843ff0671bcb5ddb65a14d64902f3b92bf5f9faa2bbbbec9e7c4be4cb0887499b359454765d850708f4c04903d98dc285565a90524ad4eb5bf53441482432cc000ecbc1b8fc1f540ca2264bb078719236d84707c490de417ea85f5b21f7e78d9199ca366d3a2926f85d039aaa9f835c5a288ba52c260291840be95ddbd5e8f9614e8ff06a030d73f109f4192ba9391bc788b0e4f287ae0ce51777bcffe5d5db70d1fd06d158377a48e3e0d6873f7661398dc37782adb4fdf900a3e8153c6de5efbce5c084e3ac5ac8b7501dc2c1713f9b2df154cd0253daf839b50c6919fce3180ebbf7232b304520cca2daf829c05cc8ca465ab48cfeebeefcb75f5b75d7a78e818b527e4d56a80ea0dea31bf0af6e37a4b4c583300325739a785450d6ba4e272eeecd3666fc0bb47531c9aabc62cd458b8c6e011154d0936df5a15dc903d9d4d9219c35869004dbcad48fe3eeca9681ef464b470da9ff4267b61174cb93aeeac05df22e05194c2c5877dc8abb35fe91e5e262f779d2b7282ff49b89a274ea5e07dd9d0a49e9518fe1b5a2dcf773d90dbdd9a29a04c930b45d28bf67b77e4804a4ce24b693fcf087e11e30cff4316def2045721f434ac3d7f0e42006ed05ef21a34e5c6a82f8e9b22b1721cdcb35e6cbb85d509ce29fa2677f1f820ff11e07cbe5c8b47c268aaa4aa2ec9769355665a8c85ae6b67d360291d44a9ba673c5dc5151b969024cd7fed7aaf6a9a4e7d409cdf58cc9c2eb3d01faa5f42391318d3b8e02de46ce6ed4cc0e5d1f80d7d5cd3510e49dad9db5a10054fab8cdacf9f4fbf1d2aa7fc56e58b9132295b08e1ae7187f8968d7fdae57c998e3eba0e48f2442ea70f5c7f7fcdb6049673e0f247874bfa4d4baf0add9e1b7c8683d32d51204c124364a58b08c70dbbbe868f8751774fa40b8a83fd7ef354546c4230dc70fc383e7c98f82aea968d5e2da98d937d949b5105bac82c594e57b98e74c4038a771c2f7a966a2ac486a4320eb9b9ecf9a496007bd487a826d248ce59b78e307a6c4a7355ba8c7639a6680ac6b883b2b390ce5807ccabb4c2a336fc1b26fec7d3f00c737a5cf3c3efde77ef672aac1db1ce4ff6a14d94c16b74ad0ff8b830bd602ddc3c6a3c611bd6f3605c95ab3b6e5026118598f579b591239dcf5b359889ad4b8d533dcebb0c8cdfac1cd07d5a0e76d46bdc6383d6efcc45a37a5ca71e12655b275aa0aebd7255446667a7786f79193fd6bf79f3679080b225efac1bb9ee5deb6abde83a1e167a9e5a62cfa31d7ff47ef5a4cb0a44b6a055d0439a199b6b178e149d36244edb667e401002b4416ec81a645632e04c69048a8ab3d98fc1da4cb8824756e4dca87ded111c410c3d6fb6ea613a8ea1c5e2c8eff9263158715313484a767e54a42b47bceb46eab3e55ea7b8fc2550f0e42dc2ccb2addd51aefe2a971118a4ea1815f492abb50eff32fd0beacefe78d17ee7f89c1bf7fda92b1bed10c0692a87143df0fa0fd0c06ad50c70bf9997c240453044d01ad74d8dcb3b8031a2d0e1233d3c1d3cc847fd24ac2cdf13a519d8eb3a22dfed08c9607937c24bd49981f8fa13fbbd4b331e29c6416d8fa6f706b26c4aeb25266410c6e9b18291ecf8b7ed5e5f4d7dcc720bc1a429364a303d7906c313fa708aa4a90d5c7ded1e443d12cf72069b9c2be6036df5217c1989160d33c4a428c1e318ce4ebcc38a610d480b668f60cb36ba8e2027ba81096297b2d09206efba479869989f153a8e9003fca49f332cceaad5aab7adc0dfc3cb62ec55000252231f9b1057891a90565ae0f678bd491acec3502ae0576ae52c93c5e816d36c1772644b4c3a2ad202bc7427194994e3fc426d9dce2ab0b69524bf84113b3eb1303a0f39c868884f9b5078ba32ee514eb67fd7addbe08fd0407ecc4f89a99d8dd800df5439e36efbec801ceb862076ccaf2a0057dc70f40d96e9909bca3bcf8cbb7f6f6b5a2bd75983a19b6be36243148720df8582f9bb025802a9a37190ac6714f1711a9bcd415a2ed681d7847a47c1cfa0d91da67427686bf4c18a20a095a662d2e040a643aa8b0787d840e3b6bcf137f96d274ac047be36dcc937cdc2ffce1fe07e5caa3a3ce1a8def4cc559b0ab11d6958a1fb393bbd942e0c85a8c8afe3eacc237b1945d1482cf752e000237a4edeb9a15fac130bca885970be3729590ab21e584d03046f194531e4160c3ffbaf15946075678d476742b8a6d562a8ea5ac5c43267c4ff82220aa86c09fa9090e3dd77f6fb7fb21c6dad430875e082de367c794c895bb8323ecf6b16de682e94b6a3cc928b0a47e3a0f9f76aebeafff1f4b3a8c61c4eda191f2884fa5105f4c3e3caac797e3b1b96ac66f4613402a5a28944ccf1f95dd087863ed8344b7353b4eaa3312d3a6299f2ed860de927f15d6681e4af8de2e707ee5e2bb6c85b0c189aa9a1201d145ed009ecf9972dd047962307dc5c20d13711a9f841c7c9c1eeba205e1c9dacf0676cdf6518f30f32455c5e1eab8ef3fd4b0995b8aab3724a97773ab57f86f80a7e863af2c5468168ee34e81e779f9dba2efbd0cf54e967b9ca9db8bad6e9d9e76e2bbff022a7c997e69f45ea695c2dca0d07a281f6d2bba37a01db1728709add1f71c062e5d60b585ffb93e306fc12075209cdadc40723feed9ecbf8043fc97769b323176a6230fef53b9bab280717dec6341ae55d6d1f84357ee2ee3621469447ff91af43e8080c8c43a5f31edae542e7c36a31fcdfae932354f459081c79ccdaeca1c8050a28bef510e08cea8386661ed095df6ea3f97047672915ace5066a52db148547bb519297dca55628108b783f362a8d8e940310328baaaa28bce2a3cbf31401fbea6b3b529b2134508db848bea8c70e3c9acb94ac8d1d2ebe84ab9a72727200ad6c3e93ea2c1e9d8860c69e4d2912427a9e87641faa251f18e4c7e77a75b906ac1e21347bc96bd89a54468422aa0d68cf17741e33f1506254c2fe290348c437af0357646b29e5c6e34bebb322f0baec5938b60b7cd94a719ca85bbf1a5ed4550635c65a2847a87e175d8dcd7cd8cc68494f783d3df0eab040887c7f6c0d9c5c9d0442822c20d8a8b269880a94c9229c58aff1039c1d26826b14d565f50431187405548f15028a70d255a5d4840d2b70331be890ec89c683597c0e91ae01718ed7d98fe370395cdcbd720255446cfa3d0a420d56865abf6f02a28fc794d5e29081efc906b6d514ef7719b63f73537952da2f36de8e0685c5667dc81be1b1964e1c26c1bcf1130f02dd4c6792a161d19db676c84bab85d6c0bea674256e57150bdaa76ecefb42b1027c38b6fef9246efbce75e010ef9c2887754744adf0020f255bdf49ba7b910ffbf047bf493299016feb224defdca6df644cdc5669395de28032daa1a44064f7c11039628abaea2d283f6dee90f7e0017e68f045fbf83bc9ef1012e65fdc83db540d6d5289860e8e922f59a8bd83083701184c46a77c542b0872630850ff2f002d7f7e1b276ec2b1f51f9704422de1fa8fb09bcc0f88a82496d3641adecb8735ef8a715bd4c6c8e6cffbf65ec462522793fd04074955d51b3e25134e9a992c4edd4ae7e5778bff07df703082ec5bab2e1c0bf0e6902c141c7f5d02ed2bef6f937048ede4e6ec769005f1159609241a28bbe7e3b6ba6eb6e618590808602750dbffd14a1fb35b98e5a3a0ddb8a159a6edd9be5fdc82f20d2669e639b032ac11d078152d8f0256b8104bc02673f64798c0ce809be231bca499aedc29b5371cfa4467c4137ba3934c9f5c1eb93fc04f65840fa6d721ddff74f1da4761a26a5963b89cd2ae7567a506a3990684311a502de52f160c9656d14b463e9587bd14e669ce1b4c0300689737408540296f852949a19dd5db3d36864218b72ae6f22c89d66012ed3d6848e854106ee64ca158ceb638757706f0c7e2622584d33e788ae43afadafc850e9b12777174ee1716eab7c0afb9f21f4cda7bbc177be5c4c098eee61b0071b1c56b9d5885509b4693dab4b6f2ecec577e93e75d0567de80f9074380f6e62de939fa2669f3f15b665e8fbbe6c0dea16011b3893e29679369e46f766e9564f3759e4fd56b5f00991c183f3932d637f6dd4971b3ed062d7181e26409569b9d1ae82e83928d425024a57461bdf2ba030e3839e9fba8577a048c883b03016800485cd61a016d6fbf502772920682eb2ee4175b6569b52bfe794f3eacab6029d576d556c9efd3bb3161e27699bbc6cd1bf7a36d3ac57ab7725fe1ceb0e9210bb2d63865f721b36b58251976ea0d8b55c80333386184b2442081ccac7ddba90a46e3ca9077d571f455de7bfcfc931c3b1327422d8bef3e80e4d8f768161ab7ee2e370e47bb9d2cb13713e907ee7ae976cb9c3ec14d13c2ee58b4b5245f62e9a57d5d482c445ccd2c005e3c455b596a13f4ea35328ed042a71904a900f8bc09c40ac686d89cb2901e999716553f1aa58aa155d905cb63f2ebbc03874707aecda21f24dbc435e844f2f742088b077f31118281d1a29c3979a69b582d059bb199f18b4d2dec9582e04cf858bd2de2e1f1db265f24dec82727d756f9015a1ea3d7fa015c7419b21d7a01eb25ec4686456b2fa9715807126e8882975a161a9294ff2e922f7246008665d7d52c9fa21d156e31b18af815656b138eb2b9c783d04dc6282776789bdd67274b4aa5b3e6fdabc0d82152792062c21caf8adc9c90e2656138881727abc4c22fc3c10d487c915fbb54c4097445cdfdb5e4dc1d061591c4dafb63080487a9a22331d4a5550df2159b5f1d844e0f0ea78152003fd6c72a9654450f7af9d0450641b696301b94b7b96bc3b62a13615359c90c035e58ae442535a5fc531a45a323e84286029762fcbda1b98f76a36eab93edabd1783c0fce8776183f6cbacbc8062d6b0102b6bdc082727893ec5fe175d3ab47e0613c2ca4507756ce9cfe74b43487287172114094507a0ff0dea5e5cd9f24a7736d07514fdce0094a92a0dc9a9fb0d9a73ccf77d8844e033ccb685c42a9dedfdc62b4daa61e7d6f790e601217d2dbd2deda2b598a5239f40c3ed2de05939326c49ae360925dd4964ff7a84310357e4d106d52364ba8337d2f2b8461713f7aa223a3dcf865b36b6d2bfc6f6c6681690d0af593f0231c19a3ff9741660b5be644b2a151d3e99c20e142e715c5e57f9cd7307c3bd35a46d2676c52a784bf8387268f8d9831ae6fa79afac572cefe800b0120ec6546292d9b01423b146858661241f63b26f6c4e6621f17d7a2e8ca79c0ee0a0ebd9869399a6a03749f499b0bae466faa02af79c9467d3e19c4fb9306f145dff6b77c4649db18aba8a1cad8a620432cf9b918ef61f29934cca3dbcd12921bea7bf90ed081ee638a1b343d1614464c31d4416a297176da506ab7fddf22f6d638998f97bc97faa4cf9eed293a3faa31cbdf354afd624c3a51805885fb7f947f4bb1e069a5fe8d7e08a8febbb199b815a72787e5ca4bd7c5aca27285e8d6174fcec245f90ed4e41cf72312d4d8790f1cc7d179643ee944411977321fce33a731e965884e7ea9754134bc087788012f26b3cc0c1e39bc7e5b7e94fd6c47ef474833d7092a916ac46ba46f0a3fccb365e71e2602f60a0429ff0a46c2bd0a7c97e7e74c49190c5f457fa366e6b08f4ccbc02de0d5e72ebd7faae5fc44e450ddc144768b3eba68e58cfda7517b18555d13f5a337a5fca27befd76cc6ed45eec0e8a646c35bb5d5901b8110d73a4e6e"}, &(0x7f0000000000)=0x1008) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xfffffffe, r1}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000300), 0x0}, 0x20) 02:38:17 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:17 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10002000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) 02:38:17 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) fcntl$setpipe(r1, 0x407, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:17 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:17 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:17 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:18 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:18 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:18 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="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", 0x1000) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11128080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x64, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x24000040) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)={0x7f, 0x8, 0x4, 0x10000, 0xf7, {}, {0x3, 0xed0449e6fc0b289c, 0x7, 0x0, 0x6, 0x8, "1fd6df40"}, 0x6, 0x3, @userptr=0x7, 0x1, 0x0, 0xffffffffffffffff}) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@remote, @broadcast, 0x0}, &(0x7f0000000200)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="000100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000d000128009000100766c616e00000000c00002800600010001000000100004800c0001000900000005000000580003800c00010005000000080000000c00010020000000040000000c00010000000000ffff00000c00010002000000080000000c00010000000000000000000c00010005000000020000000c00010080000000070000004c0003800c000100ffffffff090000000c00010000000000008000000c000100510e0000070000000c00010000000000030000200c00010009000000fc0200000c00010004000000faffffff08000500", @ANYRES32=r10, @ANYBLOB="0900963d872544fc2a880833ce5dcc510000cd0000000000", @ANYRES32=r10, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000004e80)={'batadv0\x00', r10}) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005c00)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="2000020006000000bd8d0000c0c7c5f007000000e009000003000000", @ANYRES32=0x0, @ANYBLOB="200002000600000009000000070000003bc6ffff0300000001000000", @ANYRES32=r6, @ANYBLOB="20000200000000002000000006000000ff010000ff07000004000000", @ANYRES32=r11, @ANYBLOB="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"/2052], 0xd10}, 0x1, 0x0, 0x0, 0x48000}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:18 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:18 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) init_module(&(0x7f0000000000)='\'[cgroup@\'\x00', 0xb, &(0x7f0000000040)='GPL:@@cgroup\xddvmnet1cpusettrusted\x00') 02:38:18 executing program 3: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x81800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'xfrm0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="36000000070800000000000000ebc51766684427e966188170600600000180001cff0708a8060000009852000043000000"]}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa00902, 0x5, [], @value64=0x917}}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x4) 02:38:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:19 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:19 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x1) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0x7, 0x88}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000000)={0x8, 'ip6tnl0\x00', {'ip6tnl0\x00'}, 0x40}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:19 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:19 executing program 3: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@ipv4}, &(0x7f0000000140)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x100, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd0, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x5}}]}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x7}}]}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe51, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x450000, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3ff, 0x9, r0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x2000000], r4, r5, 0xfffffffe, 0x5, 0x5}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x20, 0x6}, 0xc) 02:38:19 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:19 executing program 3: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)={'nat\x00', 0xbc, "74fc0b0657678410e2aac0faccda6d034d4ddcafba184bb91e599d9428683808ad9c02dca356a0488a86ea449c104772c00316099ca1826e00e083e669bb0b086bb65be17b906cb1286f623d87302be6cef2fc2ea257c0d2e6cfae58e5694080d9a277285ae99e6fcdaa43c58203cf23b4fd1233f4c5bc99a3dfe3ac8b1b5ccca1594a1d1944592c2f7ccf9fb7a570036cc06f735d06bb5671134c4e4b009f139f51413e927eae8c91874404e2dfbcc55f135df5bd0e072a6732eab8"}, &(0x7f0000000140)=0xe0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000080)={0x20, 0x3, 0x2, 0x5, 0x5b7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x0, 0x1000, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98090d, 0x7, [], @value64=0x3}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x139002, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4401ad8489def432) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000000)) flock(0xffffffffffffffff, 0x4) 02:38:19 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:19 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:19 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x440, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x6, 0x6, 0x3f, 0x5, 0x8, 0x7fffffff}) 02:38:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:20 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) [ 464.220413][T12615] Unknown ioctl 1075332544 02:38:20 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x5) 02:38:20 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(r25, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:20 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x408040, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000000)={0xfffffffc, 0x1, 0x4, 0x80000000, 0x100, {0x77359400}, {0x4, 0xc, 0x6, 0x3, 0x1, 0xff, "f69a57b9"}, 0x0, 0x4, @offset=0x1, 0x0, 0x0, r3}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0xffffffff, 0x2, 0xff, 0x4, 0x9, 0x3}, &(0x7f0000000200)=0x20) 02:38:20 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:20 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x100, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd0, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x5}}]}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x7}}]}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe51, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r3, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000300), 0x0}, 0x20) 02:38:21 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000200)=""/186, 0xba}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/118, 0x76}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f00000014c0)=""/205, 0xcd}], 0x8}, 0x428b}, {{&(0x7f0000001640)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000016c0)=""/224, 0xe0}], 0x1}}, {{&(0x7f00000017c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001840)}, {&(0x7f0000001880)=""/144, 0x90}, {&(0x7f0000001940)=""/217, 0xd9}, {&(0x7f0000001a40)=""/163, 0xa3}], 0x4, &(0x7f0000001b40)=""/49, 0x31}, 0x100}, {{&(0x7f0000001b80)=@ax25={{0x3, @null}, [@rose, @rose, @rose, @rose, @netrom, @rose, @default, @bcast]}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c00)=""/212, 0xd4}], 0x1, &(0x7f0000001d40)=""/81, 0x51}, 0x8}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/43, 0x2b}, {&(0x7f0000001e00)=""/174, 0xae}], 0x2, &(0x7f0000001f00)=""/49, 0x31}}], 0x5, 0x40, &(0x7f0000002080)={0x0, 0x989680}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x54) 02:38:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:21 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:21 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={[], 0x10}}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:21 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:21 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x337, 0x6, 0x8, 0x9, 0xf8, @broadcast}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r27 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r27, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r27, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r26}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r28 = getpgrp(0x0) setpriority(0x0, r28, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r31 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r31, 0x2283, &(0x7f0000000d40)) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x1c, 0x1, 0x1, [r31, r32, r33]}}], 0x100, 0x800}, 0x20040000) 02:38:22 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:22 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000)="e2a5449f3d73384b071e066f826205d15dd7cfe1e84d6db9f9b0835a0b0a1061f0d53ecbf9f4234d32f6032c42afd40cb2e1c64f03140246ca1a808834f884b05de04344bad7865885e0730571fa59776eea666dba5396f53892095ce6bfffe3037038e1b728bae666c8fd06d8a14748109bda0a7b2c7054e5b976cddc6d2503aed47f8dc46db7337adf66639b24e891c330820c112baec0f34654735c1e5127c8adb741", &(0x7f0000000200)=""/246}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xef52, 0x400040) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x1, 0x9, 0x101, 0x0, 0x0, {0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x101) r7 = dup(r4) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$RTC_IRQP_READ(r9, 0x8008700b, &(0x7f0000000400)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x100, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd0, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x5}}]}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x7}}]}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe51, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0xc3e, 0x3b6a, 0x400, r2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r8, r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r10, &(0x7f0000000300), 0x0}, 0x20) 02:38:22 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:22 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x100, 0x1}) 02:38:22 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:22 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r28, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:22 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r28, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2283, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x1) r4 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000002c0)=0x8) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2283, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYRESOCT=0x0, @ANYBLOB="7b56c092c29d8c54de223fc6e06e5d13562a281217d31b50ab43bbfcb02a7d7679642a2f5fcba9ddedca23cd0f1828db355a1f20326d1d3c93d49d783d058f5f9d4aafd2910f47ddcac30cdb1eb877f7fc586c6e6cc6ba2a8cfda8040e26071733535d8c5442b157fb188541842eaac38865811418eff0ab8a8cc03fd61bb88e426e820fa3195c5aad3d2eaa2d86b11b0d26c5", @ANYRES16=r5, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0], @ANYRESDEC=r6, @ANYRESHEX, @ANYRESHEX, @ANYRES64], 0xfe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendfile(r1, r2, &(0x7f0000000200)=0x5, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0xb50a2bbce3613821) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r8 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r8, 0xc0845658, &(0x7f0000000100)={0x0, @reserved}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, &(0x7f0000000300), 0x0}, 0x20) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000240)) 02:38:23 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1c, 0x4, 0x4, 0x3b6c, 0x0, 0x1, 0x80000000, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x3, 0xfffff000, 0x7, 0x86, 0xeb24, 0x7fffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000)="20fb04e7cfac577746bdcdd4f5f8233a9dc583ae7829ba65b2a45d2668cb909a67d998b75b25aae65b23179b28acd86a725561d626c9cb90b242", 0x0}, 0x20) 02:38:23 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:23 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:23 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x301041, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000200)={0x1000, 0xca, 0x1, 0x2, 0xd, "8a871dfc7bbc4624"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="e1fc7e20cf249d0a45591b608874796107dcfd2811acbb453c07a8616b056ca818f299bf9f6d93777370783b5b315680e30f7ea5e2d60aefab9d5ff824ad65e30a38f91904646c3b38ebe65373f6734b6a23ee44abaaa992c562412b487813b7f70015cd7fd98b98f6a128de3518b8e94fa4c35ae8df436058c44312763a49b1bf4c7853b0d1f3d2182c0a235b0b1c494b3296ab3152d857641d739a42fe6daa3ca8fb791a"], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x10001, 0x8, 0x0, 0x10000, 0x7, "1c7db0701992d2824007fd03839575f23e247b"}) 02:38:23 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x1, 0x2, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x8}) 02:38:23 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:24 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r28, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:24 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r28, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:24 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x340, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x16, 0x3, 0x8, "79749307a07d84e4f49c4fea4baac72a", "10"}, 0x16, 0x0) 02:38:24 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x4600, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev={0xac, 0x14, 0x14, 0x31}, @in=@empty, 0x4e23, 0x1000, 0x4e23, 0x74, 0xa, 0xe0, 0x20, 0x29, 0x0, r2}, {0x1, 0x72, 0x5, 0x0, 0xfffffffffffffff9, 0x101, 0x80, 0xfffffffffffffe3d}, {0x5, 0x28681eb9, 0x0, 0x7f}, 0xb1, 0x6e6bbf, 0x1, 0x1, 0x1}, {{@in=@loopback, 0x4d6, 0x5f}, 0xa, @in=@empty, 0x3505, 0x3, 0x3, 0x5, 0x7fff, 0x100}}, 0xe8) 02:38:24 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:24 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:24 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40100, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x1010, r0, 0x180000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x0, 0x7, 0x4, 0x800, 0x34, {0x0, 0x2710}, {0x4, 0x8, 0x4, 0x9, 0x40, 0x0, "f15299b0"}, 0x2f, 0x2, @userptr=0xfff, 0x3c5d, 0x0, r1}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000100)) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000300), 0x0}, 0x20) 02:38:24 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'veth1_to_batadv\x00', 0x4}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x100, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd0, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x5}}]}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x7}}]}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe51, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r3, 0xffffffffffffffff, 0x0, 0x10000000}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000300), 0x0}, 0x20) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/33, 0x21) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x5c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "c4d8e4a9eff9f36bbb849a94d458"}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "74024dd8ab"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 02:38:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:25 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:25 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:25 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000080)={'netpci0\x00', @ifru_settings={0x7f, 0xfffffffc, @fr_pvc=&(0x7f0000000040)={0x7}}}}) 02:38:25 executing program 3: r0 = msgget$private(0x0, 0x200) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/77) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 02:38:25 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:25 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:26 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:26 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r1, 0x70c2000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000)="9880605e05d54829163060d41929c46ec513fe6bf14bb539f0e21e7042a2a112dd2cd8b1202a9aa7bee525b9ec0cc2832ff06d7d94e4cb719f1fefb6ed3be15520478d9ee25171843f14bfd506a1867a862b8557da30394fc1", &(0x7f0000000100)="a80707ed0fe52bef166f60d96e9d34fa10cbfa925128e83a2ad28ab2baaf613508161e4c70bf5d22265734e894180f5d9d8377fef94d9025712b05d87f9ed406320dcfb1539ee4ffbc9bcbc6d7cea78b729ad96ff2ae136abd80cbd4f9259deda7a65a21d94c33f8020a964b702b8a50dfeffc5025e95cda22ef4fb6548439b2a090e45c65b604aed36ba271a494ce35a7c466fc543dc1adda73fde283a7e27ad2d81d3bebd4945f0af31c211e2ab9f225e9503bd78bbb3a", 0x7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:26 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:26 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x202002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r5, 0x34ac863a401ef1af, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10008801}, 0x6001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8f5d36b37df891506fcf06945daa14da5eb405003e2c5801004c902fc429edfb9f8fafed039f1d0ee6763f100da09f668d58e3933474c3fb7ce17edbb7466da171cc63279e6f64c0c200d9aa8f6fe5371ee64509418a2d0de01ca2f438e349eb07101422772a0f752df1d74be452faf47f8a9bcb0fd333e721ded50f913d47d2fde4d6308f79be5ad597661619ace379e64ca4790189da0ef06d3cb03ad7ec2edb2ddaebd70e1980f20a9b39068b134d5ee7829ee5876a5753673a342fb01583297a998cb64e3d0ec42b4a1d16ba77fa67ac3a3917c17ecab03e1560aec64b4a8171bebb350ea02be8f75b494d650d47d6bcd08537a94443"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000380)={@null=' \x00', 0x6, 'lo\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x7, 0x800, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa3a3, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x10, 0x10000, 0x61, 0x2, 0x3db03317, 0x2, 0x6}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:26 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0xdc4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:26 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:26 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="000100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4004}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0xbb7, 0x7, 0xcca4, 0x282, r0, 0x2, [], r4, r5, 0x2, 0x3, 0x5}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:26 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:26 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) [ 470.854525][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 470.950416][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:38:27 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') fchdir(r1) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x18, r2, 0x20, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008090}, 0x44884) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc4a9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xebcf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 02:38:27 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:27 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 02:38:27 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) r23 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r23, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r24, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r26, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r26, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r27 = getpgrp(0x0) setpriority(0x0, r27, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r30, 0x2283, &(0x7f0000000d40)) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, r25}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x1c, 0x1, 0x1, [r30, r31, r32]}}], 0x100, 0x800}, 0x20040000) 02:38:27 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:27 executing program 3: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) 02:38:28 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:28 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x2, 0x4, {r1, r2/1000+30000}, {0x1, 0xc, 0x8, 0x9, 0x8, 0x9, "2b6bdde2"}, 0xc9, 0x2, @fd, 0x10001, 0x0, r3}) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1, 0xa, 0xa00, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300)="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", 0x0}, 0x20) 02:38:28 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:28 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x19, 0x2, 0x7fff, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c084}, 0x4814) 02:38:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:28 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0xc29, 0x8, 0x0, 0x4, 0x7, 0xfffffffffffffffc, 0x10001, 0x9, 0x9, 0x0, 0x8, 0x7fff, 0x100000000, 0x1244, 0x955a, 0xffff], 0xf000, 0x2dd250}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) 02:38:28 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:28 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:28 executing program 3: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:29 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x1, 0x4, 0x0, 0x50a, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:29 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:29 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:29 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:29 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:29 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:29 executing program 3: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) 02:38:29 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:29 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 02:38:30 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r20 = getpgrp(0x0) setpriority(0x0, r20, 0xffff) r21 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r21, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r22 = msgget$private(0x0, 0x0) msgsnd(r22, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r22, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r22, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r24 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r24, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r25 = getpgrp(0x0) setpriority(0x0, r25, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r28 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r28, 0x2283, &(0x7f0000000d40)) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) r30 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r18}}}, @rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, 0x0, r23}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @rights={{0x1c, 0x1, 0x1, [r28, r29, r30]}}], 0x100, 0x800}, 0x20040000) 02:38:30 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:30 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vcs\x00', 0x4080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2ba8, 0x2}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9a}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x18, 0xfffffffa, 0x1000800, 0x3b6c, 0x265, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x10000001, 0xfffffffe}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000000)="f55b52d67b740fa42116907ef33c11cae8db8a544ff5964762e588c1b29b30d8dd7540399e9155b71e469acd", 0x0}, 0x20) 02:38:30 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="087418edf7063331254377d44f7216b928a6d1c1e38c4f0bcabd0f129a9a820950d4d5359c81cf41fc122c63c8d2ad1f5584138413e47e"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @loopback, @broadcast}, &(0x7f0000000040)=0xc) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000200)="9d0b95b2b1a3a588a8aabcb2406d24ce01a992d8b4ecc4423b9a0b3c0f629de457a5d74eaad9996040131aad77f7feb296c0499a930b1f0b72fd060e556107067359b0147043f3acbe07b6136d12b39faef0b27f8216d12b62a8fad2d63e3ce9aee9a554183e222f6861a8ea5c8211c195615ae703dd02a4ac407634d701c4442df20d1f7f6761d4c89c4dfe91fd292c8859a327c27c913d626aac622f81c2318347bbc700"/175, 0x0}, 0x20) 02:38:30 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="330b9360adf5e0a52d6b815b2c8c46104ac0a1d6f3d139a6c81ca532ecd15ddf5d765f1c1e0c34119c1289430aea5763ba749721a076c6f45c571a2dd3ad0b3f584627cb1e27beac11"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x3) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffff, 0x25, 0x6, 0xc50a, 0x3, "d43fafaa5486b06c"}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x8, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000300), 0x0}, 0x20) 02:38:30 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r20 = getpgrp(0x0) setpriority(0x0, r20, 0xffff) r21 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r21, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r22 = msgget$private(0x0, 0x0) msgsnd(r22, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r22, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r22, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r24 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r24, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r25 = getpgrp(0x0) setpriority(0x0, r25, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r28 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r28, 0x2283, &(0x7f0000000d40)) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) r30 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r18}}}, @rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, 0x0, r23}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @rights={{0x1c, 0x1, 0x1, [r28, r29, r30]}}], 0x100, 0x800}, 0x20040000) 02:38:30 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000100), 0xa) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) 02:38:31 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x80, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 02:38:31 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:31 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x12) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10400, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x1, 0xfffffffffffff000, 0x1000000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000040), 0x0}, 0x20) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000180)={0xc02d, 0x2}) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000340)={{0x9, 0x1}, 'port1\x00', 0x19, 0x460, 0x3ff, 0x8, 0x8000, 0x80, 0x7, 0x0, 0x1, 0x20}) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) statx(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x4, &(0x7f0000000200)) 02:38:31 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r20 = getpgrp(0x0) setpriority(0x0, r20, 0xffff) r21 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r21, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r22 = msgget$private(0x0, 0x0) msgsnd(r22, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r22, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r22, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r24 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r24, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r25 = getpgrp(0x0) setpriority(0x0, r25, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r28 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r28, 0x2283, &(0x7f0000000d40)) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) r30 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r18}}}, @rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, 0x0, r23}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @rights={{0x1c, 0x1, 0x1, [r28, r29, r30]}}], 0x100, 0x800}, 0x20040000) 02:38:31 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r20 = getpgrp(0x0) setpriority(0x0, r20, 0xffff) r21 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r21, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r22 = msgget$private(0x0, 0x0) msgsnd(r22, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r22, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r22, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r24 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r24, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r25 = getpgrp(0x0) setpriority(0x0, r25, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r28 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r28, 0x2283, &(0x7f0000000d40)) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) r30 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r18}}}, @rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, 0x0, r23}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @rights={{0x1c, 0x1, 0x1, [r28, r29, r30]}}], 0x100, 0x800}, 0x20040000) 02:38:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)={0xe1, 0xe9f, 0x0, 0x6, 0x10000, 0xfff, 0x6}) 02:38:31 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:32 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x81, 0x8, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth0_vlan\x00', 0x0, 0x1, 0x2}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 02:38:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r20 = getpgrp(0x0) setpriority(0x0, r20, 0xffff) r21 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r21, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r22 = msgget$private(0x0, 0x0) msgsnd(r22, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r22, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r22, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r24 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r24, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r25 = getpgrp(0x0) setpriority(0x0, r25, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r28 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r28, 0x2283, &(0x7f0000000d40)) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) r30 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r18}}}, @rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, 0x0, r23}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @rights={{0x1c, 0x1, 0x1, [r28, r29, r30]}}], 0x100, 0x800}, 0x20040000) 02:38:32 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r20 = getpgrp(0x0) setpriority(0x0, r20, 0xffff) r21 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r21, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r22 = msgget$private(0x0, 0x0) msgsnd(r22, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r22, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r22, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r24 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r24, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r25 = getpgrp(0x0) setpriority(0x0, r25, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r28 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r28, 0x2283, &(0x7f0000000d40)) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) r30 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r18}}}, @rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, 0x0, r23}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @rights={{0x1c, 0x1, 0x1, [r28, r29, r30]}}], 0x100, 0x800}, 0x20040000) 02:38:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8001, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x6, 0x8, 0x17, 0x3b6d, 0x31d, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 02:38:32 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7d3, 0x101041) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x7e) 02:38:32 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2283, &(0x7f0000000000)) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) statx(r4, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)) getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) r6 = getpgrp(0x0) setpriority(0x0, r6, 0xffff) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) r9 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r9, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r10 = msgget$private(0x0, 0x0) msgsnd(r10, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r10, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r12, r13, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r14, 0xffffffffffffffff}) r15 = getpgrp(0x0) setpriority(0x0, r15, 0xffff) r16 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r16, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r17 = msgget$private(0x0, 0x0) msgsnd(r17, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r17, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r17, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380), 0x0) r18 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r18, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r18, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000c80)) r19 = getpgrp(0x0) setpriority(0x0, r19, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80), 0x0) r20 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r20, 0x2283, &(0x7f0000000d40)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) 02:38:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6a, 0x0, 0xffffffffffffffff, 0x80000000, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1c3800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000180)={0x1}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x8e, @remote, 0x2}}}, 0x88) openat(r1, &(0x7f0000001280)='./file0\x00', 0x40000, 0x184) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000a40)) 02:38:33 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r28, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:33 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r20, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r22 = getpgrp(0x0) setpriority(0x0, r22, 0xffff) lstat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r24, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r25 = msgget$private(0x0, 0x0) msgsnd(r25, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r25, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r25, 0x0) r26 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r28, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r29 = getpgrp(0x0) setpriority(0x0, r29, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r32 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r32, 0x2283, &(0x7f0000000d40)) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) r34 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r27}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}, @rights={{0x1c, 0x1, 0x1, [r32, r33, r34]}}], 0x100, 0x800}, 0x20040000) 02:38:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') io_setup(0x6, &(0x7f0000000080)=0x0) io_destroy(r3) preadv(r2, &(0x7f00000017c0), 0x33d, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000640)={r5, @in={{0x2, 0x4e21, @dev}}, 0x80, 0x8001}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x3, 0x200, 0x21b, 0x4, 0x10001, 0x6, 0x200, r5}, 0x20) 02:38:33 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, r19, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r19}}}, @rights={{0x14, 0x1, 0x1, [r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) 02:38:33 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2283, &(0x7f0000000000)) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) statx(r4, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)) getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) r6 = getpgrp(0x0) setpriority(0x0, r6, 0xffff) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) r9 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r9, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r10 = msgget$private(0x0, 0x0) msgsnd(r10, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r10, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r12, r13, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r14, 0xffffffffffffffff}) r15 = getpgrp(0x0) setpriority(0x0, r15, 0xffff) r16 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r16, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r17 = msgget$private(0x0, 0x0) msgsnd(r17, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r17, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r17, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380), 0x0) r18 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r18, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r18, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000c80)) r19 = getpgrp(0x0) setpriority(0x0, r19, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80), 0x0) r20 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r20, 0x2283, &(0x7f0000000d40)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) 02:38:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x2eb, 0x0, 0x2, 0xfffffffffffffff8}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r4, 0x70, 0x4f}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'poly1305-generic\x00'}}, &(0x7f0000000280)="c310bc852db21cabebcbd772709d3b2407f5d14170064accbfd1ac717bfcebd0d81f747dc88e804690768a11e84d196c124a2fe65a4594e200cf6d8237168fb9255085461a1269f883a073091a59ed9130f2472c4aee13eff20087963c6150718e81a172b3d9a5991dbfe0520e5ace84", &(0x7f0000000300)=""/79) 02:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = dup(r0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="dd5660f810741d5461d28f56c34dc4d8cca8114faebf23a37956ed721d62e90c7ac9187818033ac34d5a37e8db6f729feecc4b5622b60568af87aa0c3d0f70de9c5bda9b7cac7d96732e3276f6af7228e19fc5df09077407c2581a284d02a1606f18db962a72ee611e75e56e01b2263d4b805484", 0x74, 0x1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty, 0x6}, 0x1c) [ 478.136569][T13073] ================================================================== [ 478.145170][T13073] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 478.153755][T13073] [ 478.156094][T13073] write to 0xffff8880b0464480 of 8 bytes by task 2183 on cpu 1: [ 478.163731][T13073] __writeback_single_inode+0x328/0x8e0 [ 478.169289][T13073] writeback_sb_inodes+0x4ba/0xa50 [ 478.174409][T13073] wb_writeback+0x1f9/0x6a0 [ 478.178908][T13073] wb_workfn+0x23e/0x9b0 [ 478.183157][T13073] process_one_work+0x413/0x8f0 [ 478.188014][T13073] worker_thread+0xa0/0x800 [ 478.192527][T13073] kthread+0x1d4/0x200 [ 478.196595][T13073] ret_from_fork+0x1f/0x30 [ 478.201014][T13073] [ 478.203345][T13073] read to 0xffff8880b0464480 of 8 bytes by task 13073 on cpu 0: [ 478.210977][T13073] __mark_inode_dirty+0xb8/0x940 [ 478.215925][T13073] mark_buffer_dirty+0x29c/0x2c0 [ 478.220871][T13073] __block_commit_write.isra.0+0x11f/0x170 [ 478.226706][T13073] block_page_mkwrite+0x226/0x230 [ 478.231736][T13073] ext4_page_mkwrite+0x50e/0x850 [ 478.236676][T13073] do_page_mkwrite+0x100/0x210 [ 478.241450][T13073] do_wp_page+0xae5/0xd20 [ 478.245795][T13073] __handle_mm_fault+0x1d16/0x2e00 [ 478.250924][T13073] handle_mm_fault+0x21b/0x530 [ 478.255696][T13073] do_page_fault+0x496/0xa3d [ 478.260430][T13073] page_fault+0x34/0x40 [ 478.264571][T13073] [ 478.266904][T13073] Reported by Kernel Concurrency Sanitizer on: [ 478.273326][T13073] CPU: 0 PID: 13073 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0 [ 478.282113][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.292698][T13073] ================================================================== [ 478.300764][T13073] Kernel panic - not syncing: panic_on_warn set ... [ 478.307361][T13073] CPU: 0 PID: 13073 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0 [ 478.316169][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.326229][T13073] Call Trace: [ 478.329536][T13073] dump_stack+0x11d/0x181 02:38:34 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2283, &(0x7f0000000000)) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) statx(r4, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)) getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) r6 = getpgrp(0x0) setpriority(0x0, r6, 0xffff) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) r9 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r9, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r10 = msgget$private(0x0, 0x0) msgsnd(r10, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r10, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r12, r13, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r14, 0xffffffffffffffff}) r15 = getpgrp(0x0) setpriority(0x0, r15, 0xffff) r16 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r16, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r17 = msgget$private(0x0, 0x0) msgsnd(r17, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r17, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r17, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380), 0x0) r18 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r18, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r18, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000c80)) r19 = getpgrp(0x0) setpriority(0x0, r19, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80), 0x0) r20 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r20, 0x2283, &(0x7f0000000d40)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) 02:38:34 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2283, &(0x7f0000000000)) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) statx(r5, &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0xffff) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r15, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r16 = msgget$private(0x0, 0x0) msgsnd(r16, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r16, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r16, 0x0) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f00000002c0)=0x0) msgctl$IPC_SET(r16, 0x1, &(0x7f0000000440)={{0x3, 0x0, 0x0, r18, 0x0, 0x89, 0x9}, 0x0, 0x0, 0x3ff, 0x101, 0x20, 0x8000, 0x10000, 0x1, 0xffff, 0x499, r19, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000800)={0x0, 0x2, 0x1, 0xffffffffffffffff}) r21 = getpgrp(0x0) setpriority(0x0, r21, 0xffff) r22 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x41) utimensat(r22, &(0x7f0000000780)='./bus\x00', &(0x7f0000000880)={{0x77359400}}, 0x0) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgsnd(r23, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r25, &(0x7f0000000ec0)=ANY=[@ANYBLOB="5f30991f9349f59e986411f1768e01cb8fe98d2bae93a0b6cc202ea2539263d93350a70789c1ea40ca14f81e6117aa5244239e00006b358b4cc578fb5367bac5a820c794c9309f76e402a7d836d3cb56b81268422a9412605798df4ff239b9c82a0abff5d7d70d75580761720d7a6cd6e3014a08dc7e81ebd07ff5f2ca4f37f7298a44f4ef49271eb1"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r25, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000c80)) r26 = getpgrp(0x0) setpriority(0x0, r26, 0xffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0x6000, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r29 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r29, 0x2283, &(0x7f0000000d40)) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) r31 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x840, 0x0) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b981b743812857fd354065d6c79274c369a487d6281ca67727e386de0ac5417c121358cb28f0af3c19186540669876a385a00e9bd", 0x35}, {&(0x7f0000000340)="e63f76627a7249cf7aa77c1f341ce7d35e5bae6288f15b8f65a975ca85ebef4bcb189af74079dd93e606fb3f85cd621c703d1b542d785daba43117fa40db02628a64899d5103c55e811b7dc41261170e5b9ef1c2153bda6fa3825afcb5764e4131fe3fffb4b3cda54fefa132a222b746ab0a88aaecad182c73433ca3a4a53303e4f51be289ccf82d84c7dd07d953b7171eb7043764232f8b6b", 0x99}], 0x2, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14}}}, @rights={{0x14, 0x1, 0x1, [r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x1c, 0x1, 0x1, [r29, r30, r31]}}], 0x100, 0x800}, 0x20040000) [ 478.333888][T13073] panic+0x210/0x640 [ 478.337804][T13073] ? vprintk_func+0x8d/0x140 [ 478.342410][T13073] kcsan_report.cold+0xc/0x1a [ 478.347265][T13073] kcsan_setup_watchpoint+0x3a3/0x3e0 [ 478.352666][T13073] __tsan_read8+0xc6/0x100 [ 478.357126][T13073] __mark_inode_dirty+0xb8/0x940 [ 478.362257][T13073] ? __unlock_page_memcg+0x47/0xa0 [ 478.367519][T13073] mark_buffer_dirty+0x29c/0x2c0 [ 478.372572][T13073] __block_commit_write.isra.0+0x11f/0x170 [ 478.378518][T13073] block_page_mkwrite+0x226/0x230 [ 478.383571][T13073] ? ext4_bmap+0x230/0x230 [ 478.388008][T13073] ext4_page_mkwrite+0x50e/0x850 [ 478.392956][T13073] ? __radix_tree_lookup+0x181/0x1b0 [ 478.398255][T13073] do_page_mkwrite+0x100/0x210 [ 478.403519][T13073] do_wp_page+0xae5/0xd20 [ 478.407866][T13073] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 478.413890][T13073] __handle_mm_fault+0x1d16/0x2e00 [ 478.419156][T13073] handle_mm_fault+0x21b/0x530 [ 478.423936][T13073] do_page_fault+0x496/0xa3d [ 478.428554][T13073] page_fault+0x34/0x40 [ 478.432710][T13073] RIP: 0033:0x401c27 02:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x3b6c, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x8200, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000380)={0x6f, 0x8}) write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getpeername$l2tp(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x114, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x27}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x793400d6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1de}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x114}}, 0x24048000) [ 478.436618][T13073] Code: 00 00 00 48 83 ec 08 48 8b 15 6d 0a 88 00 48 8b 05 5e 0a 88 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 40 0a 88 00 48 83 c4 08 c3 48 89 c6 bf 30 ed 4c 00 [ 478.456476][T13073] RSP: 002b:00007ffea70917d0 EFLAGS: 00010283 [ 478.462547][T13073] RAX: 0000001b2d93a710 RBX: 00000000d719a0b7 RCX: 0000001b2e920000 [ 478.471089][T13073] RDX: 0000001b2d93a714 RSI: 000000000000142d RDI: ffffffff7b69142a [ 478.479067][T13073] RBP: 00000000000003ff R08: 000000007b69142a R09: 000000007b69142e [ 478.487148][T13073] R10: 000000000043bba0 R11: 000000000000000f R12: 000000000076bfa8 [ 478.495232][T13073] R13: 0000000080000000 R14: 00007fa000b17008 R15: 0000000000027c7d [ 478.504957][T13073] Kernel Offset: disabled [ 478.509337][T13073] Rebooting in 86400 seconds..