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", 0x1000}, {&(0x7f0000001280)="a09f27e9fa785911accbcebd6cb15ed73ea27e719baee556654bf1e3a346c29d5c2fc79ea65264075f74d05411b12b6b445c59bff996af3cfc57bbdcbdf890e6319f93ce5a9299b238c4b78a58c60fa2e586ed7998d854de481d72aa40d6781353eb712fb2817a3f0c652252183ddfdaca960f81416b547f8207560278a6d7d03edb768f1e248db7a5a6d6959871eb8840bb167ebc7b318a2f6ac54938045eea47022b5769215a10bdf92428bf4ca078e6cc95714f41851cf1204309a998fd5e34f7ff3b9a8f15fb623fd9a496199a1edc625ad4fef413a20b", 0xd9}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="46608ca12a97188b9420a1fc17444aa91c726bc870de2a984ac45da3e0dc1e49d5358147c8b1f5c8072d8a882fdc1dc6b709ed0cc07ab5269e8d150b65f8b40e67b0c35b17ab42aa8654f619cf37c58934d0d632cc01f1027abeac5c87907e0fa1562bce46de0bd3c4dc35d93a8ba3f9fb20179097e8164adfc2fad3831f70c8f9", 0x81}, {&(0x7f0000002440)="d014a9e46241611de22e1053c7c582a65553ce0c9f98b3a97612a969834b2f30b7228145ec0f329fff8d0dd77726fdce46a6cf2feeab4a1af3683181502cf86f78845a179242a51fb8af76719da8882474e0885ed42b4caf31b0c6caee41cae4cb0be306835b02618321521643aef887512c3dd41f40dbb7190e7c86daee699f21df01675985861694ea1fa5f8c035404a5b3bd327f230c3aa67a6ac856886d4ee88277a40756a5015f4f47e7e72c25ca8a29049bdedb9f6f50f9aa37ea5757d0fd93d3483bb8ab583d3e31c0675b0d51fcabc01bc1bbe5bf8ae220d", 0xdc}, {&(0x7f0000002540)="6b456ecbe20d44e7449481750e29cc729385515f99c1b804987b8da23e3a66ba5d35188201bc692cbf049b85e289a0eebd1dbd97110810774af59d676e2e3f27232f0330c0ca887eb68a1d87cec72b3b7724215dbba211b3d1faa03fd9d8452ded8b43ec56c56433c4482690c25f92cb1541401d7bb9296ea25ae7b4a948e08dd725", 0x82}, {&(0x7f0000002600)="6c7cd0f56063308eae39bc190d654c17a974db51f440c3580d51e41ed334860cac511c68f22a5b99e85f95cb7d3783e46d66602626c032371082b8ec47191946c8f45d1ab48058b02224e2d399fccd434ea6e18621e46a721ab80b971c09ac55c76e90df5df37774c95b834352e3d336b539a9c393f5542a7d9216da6c385651225e17", 0x83}, {&(0x7f00000026c0)="573f7ff95bf34a700616a66ae7c721b3cb4a44ab143b457b1a66c74c41337599545a4828727bd8ea3e218fd27491b8b8a9ec924cfc066860681d65ff294682ba269c", 0x42}], 0xa, 0x65, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) 04:36:35 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x604}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:35 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1675.233198][ T36] audit: type=1400 audit(1615782995.027:393): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4782 comm="syz-executor.0" [ 1675.263935][ T4811] split_token_from_name: 37 callbacks suppressed [ 1675.263947][ T4811] AppArmor: change_hat: Invalid input '0' [ 1675.271833][ T4812] AppArmor: change_hat: Invalid input '0' [ 1675.282147][ T4811] AppArmor: change_hat: Invalid input '0' [ 1675.290189][ T4812] AppArmor: change_hat: Invalid input '0' [ 1675.307840][ T36] audit: type=1400 audit(1615782995.087:394): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4806 comm="syz-executor.0" 04:36:35 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x501000, 0x0) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x400001, {0x1, 0x0, 0x3}, 0xff}, 0x18) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) 04:36:35 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300d7ab6af27d3120f42902ffb95531897208910069a1cd9bbcc5f00c1ed27a469d10f45dbe08d3a78cb2163108219a2ad5b1d8943f7251b179f8c15fff269dceec3c80b96e7bebc92386606bf3788e122ad6d956814594a754b5d92c06c997ee9657149f6663c9b9fc308000000ebe43bfb719456a17e8b8157daa746e76ff5cef1815fda0e0900bbc66d6d0189dc87c81393958bf4cf5124a93ef7bb93a64c42e0ba3f31fbd0138e92b97432fbb6546adf1b94a0d0b991204d1a244eda8ec7c5a3839552f15a1eab13eeb7096b5639e51c79fe151c6a00c2c296d60aa3a18ef9e455d98760d83c8b", @ANYRES16=r1], 0x3c) 04:36:35 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x34000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:35 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) r1 = syz_io_uring_setup(0x318e, &(0x7f0000000080)={0x0, 0xe2a7, 0x1, 0x2, 0xf0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000c, 0x13, r1, 0x8000000) [ 1675.333114][ T36] audit: type=1400 audit(1615782995.207:395): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4815 comm="syz-executor.0" 04:36:35 executing program 2: syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x502e, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) 04:36:35 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1800}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1675.381732][ T4834] AppArmor: change_hat: Invalid input '0' [ 1675.391592][ T36] audit: type=1400 audit(1615782995.267:396): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4831 comm="syz-executor.3" 04:36:35 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x3b9aca00}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1675.444502][ T36] audit: type=1400 audit(1615782995.317:397): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4840 comm="syz-executor.0" [ 1675.462749][ T36] audit: type=1400 audit(1615782995.317:398): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4840 comm="syz-executor.0" 04:36:35 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40000, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000001c0)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) 04:36:35 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="181700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000bd14f8ff0800000008d700000300000085100000fbffffff18270000", @ANYRES32=r2, @ANYBLOB="000000000900000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x10001, 0xad, &(0x7f00000001c0)=""/173, 0x41000, 0x18, [], 0x0, 0x7, r3, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x12000}, 0x10}, 0x78) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x2f, @multicast2, 0x4e23, 0x4, 'none\x00', 0x22, 0x10100, 0x73}, {@remote, 0x4e23, 0x2000, 0x2, 0xfffffff9, 0x6}}, 0x44) 04:36:35 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) 04:36:35 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1e00}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1675.494024][ T4846] AppArmor: change_hat: Invalid input '0' [ 1675.547601][ T4864] AppArmor: change_hat: Invalid input '0' [ 1675.564053][ T4867] AppArmor: change_hat: Invalid input '0' [ 1675.573172][ T36] audit: type=1400 audit(1615782995.447:399): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4863 comm="syz-executor.0" 04:36:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x7ffff000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x440, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0xa00, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x19b}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4001) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000180)={@null, @null, 0x2, 0x44}) r4 = socket(0x29, 0x800, 0x800) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000100)=0x400, &(0x7f0000000140)=0x2) write$apparmor_current(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="702660f2a3007702d6", @ANYRES32=r0], 0xb6) 04:36:36 executing program 0: semctl$SETVAL(0xffffffffffffffff, 0x3, 0x10, &(0x7f0000000000)=0x1) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000100), 0x0, &(0x7f00000002c0)) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) 04:36:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket(0x5, 0x1, 0x4c) connect$ax25(r1, &(0x7f0000000080)={{0x3, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="d9ff5fff6765686174203012c3504060ee76d9eecd91bab4604416255f4b988576771f3f0503997c47791af1ac85c2f225939f2b3d365216b4d7892f9d880ffea9051c71f58b81bd9cbfc3da6adf25f632ae2f4f83790d6548427c96ac525650be2bb2f12ba83eda722ea210e7ab7f775e335fff48aef58f1849166f616e57a8ae74806a4907afd800c4d2714201f6794330908e4fc83fc952f85548ba40f1ab328dfbdecdd5a38b36ff5b420d7e0b95c8ed104c151ad41d0c86536312bd54d463c5ba6a2985dec4bf96527edcf6bd17c4b8a88242119c117099512e9668a331a39562"], 0x3c) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0xc07e0000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@hat={'changehat ', 0x4, 0x5e, ['/proc/thread-self/attr/current\x00', '\x00', '\x00']}, 0x3e) 04:36:36 executing program 0: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'changehat '}, 0x1d) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 1675.600779][ T4864] AppArmor: change_hat: Invalid input '0' [ 1676.190524][ T36] audit: type=1400 audit(1615782996.067:400): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4880 comm="syz-executor.3" 04:36:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2400}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:36 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x60000, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES32], 0xb6) [ 1676.261198][ T36] audit: type=1400 audit(1615782996.097:401): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4879 comm="syz-executor.0" 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 2: ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xb6) 04:36:36 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_io_uring_setup(0x2d3e, &(0x7f0000000080)={0x0, 0x9174, 0x0, 0x3, 0x1b1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180), 0x9) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x3, 0x5e, ['/proc/thread-self/attr/current\x00', ',*\x00', '^\xc6\x00']}, 0x42) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendto$l2tp6(r1, &(0x7f0000000140)="5f2a26f3d509420db919b28a83a66a05bf8e903f622a709d253de5f0a9cac9f64346a7e5221c35d140e69db0a1efa3892ab5faa39134523910f2805bd7612022f5ebf0c75d4e71e7e6d7efb0a7200fe4dffc21652bec569273fc3d3804119e666564bc85f536c99e1d0ea36c0878df68f85e5fcb54e430762e7121c3b973872633d31aab768d164f2a2986bbf00995d66b69e57cb5cd5a0fe2dbb0a8df5ad4d2ffd3f9d1d8588edfe05be38214102fb42d9fe603839f7cd25e33bb9c29cf22e3af19c50050bbf832bf93e42340febea2be9bc069", 0xd4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x7fff, @private0, 0x0, 0x1}, 0x20) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x7ffffffff000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2a00}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x4000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000000c0)={[0x7fff, 0x4, 0x4e0b, 0x2, 0xfffeffff, 0xfcc, 0x3, 0x5, 0x7fffffff, 0x8, 0x6, 0x1ff, 0x3, 0x7f, 0x10001, 0x101, 0x23b3, 0x10000, 0x3, 0x7, 0xfff, 0x0, 0x80, 0x1, 0xe76, 0x7, 0x4, 0x7, 0x3, 0x8, 0x2698, 0x7, 0x5, 0x6, 0x5, 0x9, 0x71, 0x5, 0x5, 0x36c, 0x8, 0x3, 0x9, 0x8, 0x100, 0x5cdf, 0xfffffc01, 0x3, 0x8, 0x5, 0x6, 0x2, 0x8, 0x10001, 0x5, 0x400, 0x10000, 0x20, 0x59c, 0x0, 0x6, 0x8000, 0x81, 0x7ff, 0x0, 0x3f, 0x1, 0xe8b7, 0x7fffffff, 0xc8f, 0xc47, 0x9, 0xffffffad, 0x4, 0x10, 0xff, 0x4, 0x3c, 0x161c, 0xfd, 0xfb, 0x5, 0x10001, 0xfffffff8, 0x40, 0x23, 0xfffffffc, 0x6, 0xf5, 0x1ff, 0x8, 0xffff8000, 0x401, 0x2d6, 0x10001, 0x7, 0x81, 0x1, 0x5, 0x8, 0xac, 0x3, 0x8, 0x9, 0x8, 0xa39d, 0x1, 0xffffffff, 0x2, 0x3f, 0x1, 0x34, 0x7, 0x0, 0x2, 0x20, 0xfffff211, 0x7, 0x5, 0x80000001, 0x20, 0x1, 0x7fff, 0x3, 0x6, 0xd76a, 0x3cae4f59, 0x4, 0x3365, 0xffff, 0x1ff, 0x200, 0x5, 0xfffffffa, 0x5, 0x1, 0x2, 0x4, 0x101, 0x3, 0x100, 0x5, 0x4, 0xff, 0xec5, 0x8, 0x80, 0x100, 0x4e02, 0x100, 0x1, 0x5, 0xfb, 0x7, 0xffffffbd, 0x0, 0x6, 0x9, 0x1, 0x5, 0x8a, 0x7ff, 0x3, 0x7ff, 0x8d, 0x800, 0x20, 0xfffff2a7, 0x9, 0x10000, 0x87, 0xffff, 0x5, 0x0, 0xfffff800, 0x4, 0x1, 0x46f, 0xd7e, 0x40, 0x4, 0x3, 0x11d, 0x8, 0xfff, 0x80000000, 0x4bf, 0x3, 0x81, 0x3, 0x3, 0x7fff, 0x9, 0x4, 0x81, 0xdc, 0x7f, 0x1ff, 0x200, 0x5, 0x8, 0x9, 0x81, 0x100, 0x1, 0x200, 0x6, 0x3bf35b5c, 0xfff, 0x2, 0xbe, 0x7e, 0x7, 0x8, 0x6, 0xfa, 0x8, 0x0, 0x7ff, 0x1, 0x3, 0xef, 0x81, 0x496a, 0x5, 0x4, 0x400, 0x1f, 0x7ff, 0x5, 0x9e3, 0xaa12, 0x70c5, 0x7fff, 0x0, 0x7, 0xf59b, 0x5, 0x4, 0x9, 0x2221, 0x8, 0x5258, 0x50, 0x3, 0x0, 0x8, 0x10001, 0x5, 0xffff, 0x2, 0x7ff, 0xbd, 0x7, 0x0, 0x8, 0x8000, 0x10000, 0x2, 0x7fff, 0x4, 0x9, 0x1, 0x6, 0x1f, 0x8, 0x0, 0x7ff, 0x3, 0xed3, 0x5, 0x2, 0x85, 0x4, 0x7ae, 0x62, 0x3, 0x1, 0x3, 0x40, 0x8, 0x6, 0x3f4d, 0x1, 0xfffffff9, 0x1, 0x2, 0x0, 0x10000, 0x2, 0x2, 0x9, 0x2, 0x80000001, 0x77, 0x3, 0x7fff, 0x6bf8, 0x6, 0x3, 0x6, 0x8, 0x400, 0x8, 0xfffffc01, 0x1f, 0x200, 0x2, 0x6, 0x4, 0x6, 0x7, 0xfffffffc, 0x2, 0x3, 0xa73a, 0x9, 0x5c, 0xfffffffb, 0x1000, 0xfffffbff, 0xffffffea, 0x4, 0x40, 0x0, 0x42e2, 0x4, 0xffffffff, 0x0, 0x5, 0x8, 0x6, 0x80000000, 0x3, 0x8001, 0xfffff5a3, 0x8, 0x8de, 0x9, 0x4, 0xffffff3b, 0x7fffffff, 0x2, 0x2, 0x1, 0x18, 0x0, 0xff, 0x2, 0x6, 0x7, 0x6, 0xd21, 0x9, 0x4, 0x8001, 0x1e, 0x7, 0x1, 0x100, 0x7, 0x6d000000, 0x9, 0x80000000, 0x34d4, 0xc128, 0xffff, 0x5, 0x0, 0x2b36, 0x10001, 0x1, 0x0, 0x5, 0x3, 0xfffff801, 0x400, 0x7, 0x76, 0x11, 0x3, 0x9, 0x3, 0xce, 0x2a, 0x1, 0x101, 0x3, 0x7, 0x1ff, 0x80000001, 0x6, 0x3f, 0x1, 0x9, 0x800, 0xfff, 0x2, 0x20, 0x9, 0x9, 0x7, 0x40, 0x80, 0xffffffff, 0x1ff, 0x7, 0xff, 0xfffffffe, 0x6, 0x3, 0x5, 0x2, 0x1, 0xbc28, 0x2, 0xfff, 0x4, 0x3f, 0x400, 0x1, 0x3ff, 0x9, 0x5, 0xdc, 0x5, 0x40, 0xccdc, 0xcd2, 0x0, 0xa2, 0x8000, 0xa0000000, 0xfad96cf7, 0x569, 0x10000, 0x6b8, 0x401, 0x716f, 0x8, 0x5, 0x1, 0x0, 0x5, 0x400, 0xffffff80, 0x6, 0x5, 0x1, 0x1, 0x1, 0xebf3, 0x400, 0x2, 0x72d, 0x22, 0xffff7fff, 0x81, 0x7, 0xee4b, 0x4, 0x1, 0x10000, 0x6, 0x5, 0x9, 0xe5c, 0x6, 0x793, 0x80, 0x9, 0x9, 0x6, 0x1, 0x8, 0x2, 0x10001, 0x400, 0x401, 0xfff, 0x3518, 0x9, 0xffffff4f, 0x3, 0x139, 0x33b90, 0x7, 0x0, 0x0, 0x1, 0x66b, 0x8001, 0x42, 0x6f94, 0x1, 0x20, 0x8, 0x0, 0x3, 0x9, 0x4, 0xa48b, 0x585, 0xffff, 0x883, 0x3, 0x81, 0xfffff001, 0xfd929eb, 0x9, 0x0, 0x2, 0x8, 0x80, 0x80, 0x7f, 0x7fffffff, 0x4, 0x92, 0x8, 0x8, 0x43d, 0x9, 0x8b5, 0x8, 0x1, 0x0, 0x8, 0x9, 0x3, 0x8, 0x8, 0xc1f, 0x3, 0xf6, 0x4, 0x26fd, 0x4, 0x9, 0x9, 0x767, 0x8000, 0x4, 0x7fffffff, 0x3, 0x8, 0x7, 0x9, 0x80000001, 0x9, 0x1e, 0x40, 0xeab, 0x7, 0x5, 0x7ff, 0x4, 0x6, 0xfffff801, 0x8001, 0x10000, 0x7, 0x9, 0x26f, 0xfffffffa, 0xffffffb2, 0x9, 0x9, 0x1f, 0x7fff, 0x7f, 0xbf8, 0x1, 0xfffffffc, 0x3, 0x7ff, 0x3, 0x3ca0, 0xfffffff9, 0x411f, 0x3, 0x3f, 0x3, 0x81, 0x400000, 0x7, 0xbec6, 0xffffff9c, 0x5, 0x6, 0x69b6fe0f, 0x0, 0x3, 0x0, 0x2, 0x20, 0x4, 0x2, 0x9, 0x5, 0x2, 0x180, 0xffffffff, 0x8000, 0x8, 0x9, 0x1, 0x8000, 0xffffff60, 0xaf2, 0x0, 0x3ff, 0xac, 0x1000, 0xfffff3b7, 0x5, 0x8, 0x400, 0x7, 0x1, 0x5348, 0x9f1d, 0xf31, 0x2, 0x40, 0xfff, 0x9, 0x32b, 0x0, 0xad7, 0x4, 0x30, 0x8, 0x2, 0x0, 0x3, 0x8, 0x98e, 0x6, 0x5, 0x3f, 0x200, 0x9, 0x8, 0x0, 0x2, 0x0, 0x9, 0xfff, 0x9, 0x80000000, 0x8, 0x7ee0cab3, 0x6, 0xffffffff, 0x1, 0x9, 0xa25, 0x81, 0x10001, 0x43c, 0x1fa6, 0x0, 0x36a, 0x98, 0xf78c, 0x7, 0x2, 0xfff, 0x8000, 0x7, 0xe495, 0x9, 0x6, 0x7fff, 0xffff, 0x651ed06, 0xfe, 0x7, 0x5, 0x5, 0x100, 0x5, 0x6, 0x7, 0x5, 0x45a5, 0x0, 0x81, 0x8001, 0x7fffffff, 0x89c, 0x8107, 0x1, 0x4, 0xffff8001, 0x7, 0x4, 0x2, 0xb17b, 0x4800, 0xfffffff7, 0xffffffc1, 0x6, 0x8001, 0x80000001, 0x7, 0x10000, 0xfff, 0x4, 0x4, 0x8001, 0x2, 0x1f, 0x30000, 0xfffffff7, 0x8f2, 0x7, 0x3f, 0x100, 0x87, 0xfff, 0x7, 0x3, 0x7fff, 0x2, 0x7f, 0xffff0000, 0x40, 0x9, 0x6, 0x94e, 0x9, 0xffffffff, 0x4, 0x2, 0xffc000, 0x101, 0xc0000000, 0x0, 0xd133, 0xfc000000, 0xe611, 0x8, 0x2, 0x4, 0x1, 0x70, 0x1, 0x1, 0x8, 0x1ff, 0xb0c, 0xfffffff9, 0x3bf, 0x400, 0x6, 0x100, 0x1, 0x80000001, 0x3ff, 0x0, 0x20, 0x3, 0x401, 0x401, 0x7, 0x101, 0x0, 0x80000001, 0x5, 0x9, 0x0, 0x9, 0x7f, 0x3, 0x10001, 0xa0, 0x3f, 0x400, 0x3f, 0x5, 0xfffff800, 0x2, 0x5, 0x1, 0x9, 0x400, 0x3, 0x9, 0x5, 0x2, 0xfff, 0xfffffffb, 0x1, 0x4, 0x4f, 0x2, 0x0, 0x5, 0x5, 0x4, 0x82, 0x7f, 0x4e51, 0x7ff, 0x200, 0x0, 0x0, 0x800, 0x4, 0x53, 0x2, 0x3, 0x2, 0x1, 0x2, 0x15e, 0x2, 0x1, 0x7f, 0x6, 0x3, 0xcf, 0x6, 0x7ff, 0x7, 0x7, 0x440f, 0x3, 0xffffffc0, 0x2f, 0x17ba4633, 0x0, 0x78, 0x400000, 0x4, 0x4, 0x101, 0x46, 0xe9b9, 0x8, 0x6, 0x9, 0xfffffff7, 0x1, 0x6, 0x8, 0xd21d, 0x8, 0x9, 0x6, 0x8000, 0x0, 0x7fff, 0x0, 0x401, 0x20, 0x0, 0x3, 0x7, 0x9, 0x2, 0x9, 0x400, 0x0, 0x2, 0x5, 0x80000001, 0x1, 0xffffffe1, 0x6, 0x3ff, 0x7, 0x2, 0x4, 0x8, 0x99bd, 0x401, 0x9, 0x7, 0x1000, 0x6, 0x4, 0x5, 0x3e7, 0xeeb0, 0x5, 0x6, 0x1, 0x4, 0x0, 0x7fffffff, 0x2, 0xffff7fff, 0x4, 0x2, 0xfffffffb, 0x9, 0x6, 0x9882, 0x7, 0x7f, 0x9, 0x10001, 0x733, 0x5, 0x9, 0x8, 0x1, 0x8000, 0x3, 0x2, 0x6843, 0xe5, 0x20, 0x40, 0x1, 0x20, 0x10001, 0x9, 0x80, 0xcf7, 0x0, 0x7ff, 0x7, 0x0, 0x9, 0x1ff, 0x9, 0x401, 0x0, 0x401, 0x1, 0x20, 0x8001, 0x6, 0x1, 0x3, 0x1000, 0x6, 0x6, 0xfff, 0x2, 0xffffff7f, 0x1ff, 0x8, 0x0, 0x1ff, 0xd58, 0x1, 0x39800000, 0x0, 0x428212fe, 0x1, 0x2, 0x75, 0x40000000, 0xfff, 0x1000, 0x1, 0x1, 0x337, 0x80000001, 0x4, 0x0, 0x3, 0x8c0, 0x761f, 0x6c48, 0x3, 0x8, 0xffffffff, 0x751, 0x4, 0x1, 0x5d537188, 0x80000000, 0x1400000, 0xb72b, 0x1ec2, 0x0, 0x8, 0x362, 0x9, 0x4, 0x80000, 0x2, 0x50ef, 0x5, 0x1, 0x649f, 0x8001, 0x7, 0x0, 0x5, 0x5, 0xb, 0xfffff001, 0x3, 0x4, 0x4, 0x7, 0xfffffffb, 0x4, 0x2, 0x76, 0x0, 0xffff7fff, 0x5, 0x0, 0x2, 0x8, 0xfff, 0x5, 0x3, 0x80000001, 0x8000, 0x6, 0xfffff800, 0x8, 0x0, 0x3, 0x14a]}) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x10000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 3: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000000)=0xcbd7, 0x0, 0x4) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x400000, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:36 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x140, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1000, 0x4000}) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7065726d6861742030da858dfcbc811213b5e6d0de57b10b42fe064677eb3f9fed7e9180c450edd81f93590076e9d5112cbecb883be3b8c00400000000000000e6f51ac9b7f8203bca666b471dec29dab374044d5f6cf800"/108], 0xb6) 04:36:36 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0)=0x0, 0xfffffffffffffffe) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000002240)) syz_io_uring_setup(0x7624, &(0x7f0000002100)={0x0, 0x9fd4, 0x4, 0x3, 0x24c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000002180), &(0x7f00000021c0)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000002200)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x9) 04:36:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc100000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0xca9a3b00000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x3, 0x2) 04:36:36 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x673c2aaf4666fb8e, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYBLOB="804c9a5324d0e3544536d274c4ca21d01b0800000000000000d2ba8fdf50f4f76cd952bb06fe7a34b28f4a4b4a1c16e40a44ddca41d1c6f41342a517df9c3f9ebcabff4318f1b039a01d01136dc5eba46d43fca4aa477913d88386c5575ee136a38077ea97e336b1c12ea9d3a6838a7b67356079e1ab68bb4a7a5d1c7fdead23c99e159474f1d4e029ce9fc206a192d78687a41679bd4c08d66e3f", @ANYRESDEC=r5, @ANYRESDEC=r3, @ANYRES64=r0, @ANYBLOB="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"], 0x2b) 04:36:36 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='permhat 0', @ANYRES16=r1, @ANYRES16], 0xb6) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'changeprofile ', '\x00'}, 0xf) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x3c) r1 = syz_io_uring_complete(0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@hat={'permhat ', 0x1, 0x5e, ['\x00', '^%-#\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/:\xbf)\x00']}, 0x83) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:36:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3600}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:36 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_complete(0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7066698265202f"], 0x2b) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'changehat ', 0x1, 0x5e, ['ipvs\x00', '#\x00', 'ipvs\x00', 'H\x00', 'tunl0\x00']}, 0x31) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0xf0ff7f00000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f00000000c0)=0x20) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000140)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/139, 0x8b}) 04:36:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0xf0ffffff7f0000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000000)=""/3) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:36 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8001, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[-)@.$\x00', 0x7) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000100)={0x1, 0x5, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffff000}, {r2, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x1000000}, {r3, 0x0, 0x1000000000000, 0x1000000000000}]}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065726d68c5742030"], 0xb6) socket$inet_smc(0x2b, 0x1, 0x0) 04:36:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3c00}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:36 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="e039778f3f47e33681a42fac7e5762d6bd9ec15ac47610a051fba9ffe92786d8ef891045a3a61e26a84ce2ca8ff5d00e0b60df667edb8a0ccfb08ed1734603f0e70ff84fe7898c57bac36500aea022026275ba7bdaa149f98847a7", @ANYRESDEC], 0x2b) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@default, @bcast, 0x7, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 04:36:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x100000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x80000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7fff) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='changehat 0', @ANYRES16], 0x3c) 04:36:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:36 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7065726d066174203042d4f3d9e3c15c85a5b344000091610dda073f05fdcc24"], 0xb6) 04:36:36 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10, 0x100010, 0xffffffffffffffff, 0x8000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x20000, 0x0) write$tun(r1, &(0x7f0000000580)={@val={0x0, 0xf5}, @val={0x0, 0x80, 0x4, 0x6, 0x9, 0x7ff}, @mpls={[{0x7}, {0x5, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5f15}, {}], @ipv6=@icmpv6={0x8, 0x6, "fd0fa3", 0x1fe, 0x3a, 0x1, @private0={0xfc, 0x0, [], 0x1}, @mcast1, {[@dstopts={0x0, 0x1, [], [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3b, 0x0, 0x7f, 0x0, 0x0, 0x18, 0x68}, @routing={0x5b, 0x2, 0x0, 0x2, 0x0, [@mcast1]}, @routing={0x5a, 0x4, 0x0, 0x6, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x3c, 0xf, [], [@ra={0x5, 0x2, 0x40}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0xf847, [0xfffffffffffffffd, 0x0, 0x3f, 0x6, 0x80000000]}}, @jumbo={0xc2, 0x4, 0xffff}, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x200, [0x9c, 0x42cf, 0x48d]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x81, 0x80, [0x8000]}}, @pad1, @enc_lim={0x4, 0x1, 0x20}]}, @routing={0xc, 0x4, 0x0, 0x20, 0x0, [@private2={0xfc, 0x2, [], 0x1}, @mcast1]}, @srh={0x3a, 0x2, 0x4, 0x1, 0x3, 0x78, 0x3, [@mcast2]}], @echo_request={0x80, 0x0, 0x0, 0x0, 0xce18, "9f9b2552c41e79bc0fcd4fd3f6625e4b74e0124c942a980720516a8dfc178cfec199e05d93405f4de8062c41909e7b7c18f479dafbaaeace90715b0b043edf9163920ab7ae3be589ea72ffec2ae2d82896bcd64cf047f1ed12b61b6c5c48f597c6872210171d748b3a75655b5fe6f871285cb84c6b9ae9381ac68c3c3b9122e4ed7b4181e5d5e182a2eaad07efb1c40cbcc0fe92b98152c9ed4db229c39055d4f64bac1d9769246f50b60a209833f09ae0519c46f9411d048b424ec058c4f968e56bb29e05c30faa0879b4b600dd"}}}}}, 0x254) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x200000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4200}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) mq_open(&(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x80, 0x4, &(0x7f00000001c0)={0xc7, 0x7, 0x2, 0x7fffffff}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f00000000c0)=""/83, 0x53}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="63072b5a59fe34a6eebabe82de1ec846e071616a1a4b9dcd541107"], 0x3c) 04:36:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e0000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x18000000}) 04:36:36 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) 04:36:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x3400000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:36 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="705d726d686174e96484584ebc55428ee04731ced17dcf350a5ddb7b98a94320acf8654fa9d0480fc000000000000403ff2e3d27c7dfd136663d48088d42ea0514c165902cf5b1db4affd8cfeb3b0e4e1adb9d3e93db14ad59569ce14935c7cec4591bce8fba3e71e285132d27faf9635ba9332b41c1bbf3f2b78160f2c3abe848f28d9a8c228bd36399105d736a3384d4ee719326f5bb582a06b23f326c43d57001dcb63e3cf00e3b98e7b007a7ee6a78109e5c6f2e2c2fc816"], 0xb6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 04:36:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x46200, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) r3 = getuid() ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000004980)={0x3, @default, r3}) write$sysctl(r1, &(0x7f0000000080)='4\x00', 0x2) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x2, 0x0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40096101, &(0x7f0000000000)={{}, 0x6}) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4641fa0f, 0x0) r7 = pidfd_getfd(r6, 0xffffffffffffffff, 0x0) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r8, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES64=0x0, @ANYRESHEX=r8], 0x3c) 04:36:37 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x8000000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:37 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'stack ', '/proc/thread-self/attr/current\x00'}, 0x25) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="3065408d30726f66698265202f"], 0x2b) 04:36:37 executing program 2: write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:36:37 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0x453, 0x20, 0x70bd27, 0x25dfdbfc, "bd92a9a38eed51cba99d0cedda90a6af599ea08365a47a2c614f0760a9ffbc86c04f6c14d756948e7f5164258a6d8d736a4425f4b6127ade916525b194af9535022b838df8bd08f89ab75f4f5a1847439a4df2aafaa5e192115f21e9adf9081f1cbb058fac31fc264cdf8e12e399ac4f206b2c35db5e3b4555812582664c19891c145a82a8f9b5cadeeb4d023e9b32a0271ffd7d9d1bf196aebea8df08b3d33c242609853932d8b90c8214f6d231b933a55e8a44714f72e3ab0538e5ec39b93aab6282fab60920ff0ce4eab234c5bda5171a4929ed03f362ee6a96bab84be2a462eb2a86aeace61dcfecdd4ff431b9", ["", "", "", "", "", "", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x4008005}, 0x4010) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) r2 = syz_io_uring_complete(0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000240), 0x4) 04:36:37 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff00}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:37 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0xc07e000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:37 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) 04:36:37 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x17}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_DEBUG={0x8}]}, 0x60}}, 0x40010) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x2b) 04:36:37 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:37 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:37 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x5) 04:36:37 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) socket(0x4, 0x0, 0x3) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$802154_raw(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000100)="88bdc6e485b65e9379ffc3022947f780a2e789dd8893d6876522ab30fab886cc81136ca25615174ae26f4e0b63da59dd94cbf127d570201b6da9fc5527945160396c4f518303f65130083857a8fa05ebc797e53ad6221439ff2f1c561af9a499e299526bed31de356076022acfaf12dbfb280e4b83286e03065efd7084291c89b327f938898d185a33be32b03f41da1916f6fb90ae365c51b12f98949ed5a18c8e3d77f9d7bf767ce34d51b2aaaf422e", 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x10) write$apparmor_current(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7065726d68617420309d2653bf2935ae2874c8d88f3169d003832d5fb6bd1b3c562f9a15986f81236bf015c3dbfc0f16a6f50ff7a50a15238b925ef6afdb416d640d8667fb7d1b8cf2"], 0xb6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 04:36:37 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYBLOB="26b0ab0f60c2ae162411c01ba28fbd310e41142bc521980d47208d6a2d6dcb14ce211876c0331bc6b28a37ddac5ee15aea3150ecf2b532a68adde385181166e599d402327c5c8bdfbeaaa5a0c6b28a681ab8da49688ba6af7aa097bfc87872e2088ec085c99dde38d61378a63f909cb942", @ANYRESHEX, @ANYBLOB="c3f5377054e0383095c586f9b2b4835726d275decaf3a8541545fa5c933083a7d9fe9bde7bff2fefb6f3797857aa66296cfd5036f95e6f3e54f28e0a418dc15dce6574a178099fff225c7625a816707b096cdd3953f4f995f5ff2d61229cb2fdf2d4d92c4f509cf07748ebed2cac54f1c7a863fc501b18fb43daea9671465e24ae691f2f37b83bee6c664f64206a0a752dfe9512fc53a67413837ace46bd333115dfabfe65ce50b1d1a932a704307b20be658f13f56119b8df1731d9bfcf9c31c68f9bde91d446b4043951b61274381b25c29918712dd86a55b1490522f0", @ANYRES64=r0, @ANYBLOB="1c1dece8895ceeafff63652fe721a4ae51c36514c31f90eb2d63d948c23a72b103153a7a7fe65852750c64d6bd2ccaacc68b22e7d06a33db4c21235da0362d1dbb0e1b89d5ef7a970ad21ae45b3bb551ff1b629221e3925cc787f6ac9eed55e51af90db8"], 0x2b) 04:36:37 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:37 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10091}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:37 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x40000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:37 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) 04:36:37 executing program 3: r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000300)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) write$apparmor_current(r2, &(0x7f00000000c0)=@hat={'changehat ', 0x0, 0x5e, ['}\x00', '\xb3&\'.+\x00', '$)!--]%\x00', '$a,.\x00', ':[#\x00', '/proc/thread-self/attr/current\x00', '^$[(\x00']}, 0x5a) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) sendmsg$can_j1939(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x4}, 0xfd}, 0x18, &(0x7f0000000240)={&(0x7f0000000180)="05e492f94a6c9bdd9ff9e7c1421ff88cc18f0cc965e940e2df7ad004044da00ef1d25b822454458a411893e386de2ff4cd22a82fe8928b0b5e44d341d65c03b8084d25802596babea18aeb3fd438d9b3e237f371ea7df609156fe75a74238b1cbd25ff90ec3ca43984ae3a5100239c449955162fa86490ba5cb377752d776ef53410eae72f398a62856de6d2df5d65368f56e4", 0x93}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 04:36:37 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x56b301, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x401, 0x0, 0xfc53, 0x101]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="be8abc829521020030"], 0xb6) 04:36:38 executing program 0: sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044000}, 0xc0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8080, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0), 0x2) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) 04:36:38 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:38 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:38 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[], 0x3c) 04:36:38 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket(0x28, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r1) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:36:38 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d86882bda472236f058e3929f317d75976c38d383e591e293c34b9fa4153fc0adb5957e148f77e8ac5b4a971d94f244d1c24ad235745c68cb1d7e8486d27657e616b10381b00ce57754573b68fa04d7da8c448755dcfd2d1411714beeb2674fe7015ea47622d34289c4cda0c0ae0694165d5fda1d8e3"], 0xb6) 04:36:38 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x91000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:38 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:38 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES64=r2, @ANYRES16=r3, @ANYRESOCT=r2, @ANYBLOB="7954d6b40cf157a0e3b2c831c793b7e59acb4e4060d81bb7f548554b9ff32cc1f09c9646a8bcd6d005e23f7c82590c0ef4c0012166f5a59e58b917d47b51058fafb0444856ebd054ad12a1938918c010800af2846507c3a7d9402f2c28d5701de74e837bbb253b248aeb94b22e3b748cbd89eca964837b3d939bcc653bc1bef2608b1086c3f50af68a6fc23dd4f67daaeca9d366f4f57adee7fd7550ec86cdc4e3e14c6198b197b2ae520232237e54b4324e01a8cb3deb26470dae82e1e10469482171d33108702ba7ead1a2046dad020abb24a6880e97620e743ce86e2da5179de83898c04987fe746f13437a1da624", @ANYRES64=r4, @ANYRES16], 0x2b) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x44c, 0x3f3, 0x8, 0x70bd26, 0x25dfdbfc, {0x1, 0x2, 0x39, [0x5, 0x8, 0x9, 0x81, 0x4, 0x3fffc00, 0x7fffffff, 0x4, 0x4, 0x6, 0x6, 0x10000, 0xffff5328, 0x8, 0x7fff, 0x1ff, 0x431, 0x8, 0x5, 0x800, 0x2, 0xb1, 0x7, 0x7f, 0x3, 0x2, 0x716, 0x80000000, 0x1e1, 0x40, 0x8, 0x3, 0x6c, 0x40, 0x29b8, 0x6, 0xfff, 0x9, 0x1000, 0xfffffc01, 0xb3f, 0x0, 0xffad355, 0x80000001, 0x2, 0x0, 0x7fffffff, 0x800, 0x100, 0x80000000, 0xffff5302, 0x4000, 0x5, 0x80000000, 0x5, 0x6, 0x6, 0x1bf, 0xa5d, 0x8, 0x1, 0x7fff, 0x20, 0x1], [0x800, 0x80000000, 0x2, 0x0, 0x401, 0x6180, 0x4a, 0x6, 0x6, 0x40, 0x97, 0x200, 0x401, 0x5, 0xd03, 0x2, 0x4f, 0x1, 0x5, 0x400, 0x6, 0x1ff, 0x9, 0x6, 0x8000, 0x1, 0x3f, 0x3, 0xffffffff, 0x80000001, 0x8000, 0x8edb, 0xdcc, 0xc4d, 0x2f999469, 0x2, 0xb6a6, 0x9, 0x8, 0x200, 0x5, 0x8, 0x2800, 0x5, 0xd4e6, 0x0, 0x1500, 0x7ff, 0x9, 0x3ff, 0x8001, 0x2, 0x5, 0xfffff4cc, 0x282fa696, 0xeb44, 0x80000001, 0x8000, 0x0, 0x9, 0x7fff, 0x8, 0x7f, 0x2], [0x3ff, 0x9508, 0xffff, 0x1ff, 0x4, 0x3, 0x485, 0xcb, 0x3, 0x20, 0x7, 0x2, 0x7c6, 0xfd, 0x3, 0x7339, 0x80, 0x1000, 0x5, 0xfff, 0x2, 0x2, 0x5, 0x1, 0x10000, 0x4, 0x2, 0x5, 0x1, 0x1, 0x3ff, 0x8, 0x2e6e, 0x8, 0x6, 0xff9, 0x9, 0x1, 0x0, 0xff, 0x800, 0x8ec, 0x1, 0x9, 0xcd0, 0x0, 0x4, 0xa1f, 0x40, 0x45ad, 0x4, 0x2, 0x27b8599f, 0x7fffffff, 0x2, 0x6, 0x1, 0x8, 0xd9c4, 0x3, 0x4, 0x6, 0x7, 0xfffffffb], [0x200, 0x6, 0x7ff, 0x4, 0x1, 0x9, 0x5, 0x6, 0xc7, 0x7ff, 0x2, 0x401, 0x1, 0x5, 0x2a04, 0xc6, 0x7ff, 0x9, 0x2, 0x7fffffff, 0x20, 0x1e0cbcee, 0x7, 0x9e19, 0x9, 0x0, 0x1ff, 0x8, 0xd21, 0x3, 0x0, 0x80000001, 0x8, 0x81, 0x9, 0x10001, 0x9, 0x1ff, 0x8, 0x3, 0x1, 0x5, 0x9, 0x80000000, 0xfffffff8, 0x1ff, 0x7f, 0xfffffffb, 0x5d2, 0x7dbf, 0x0, 0x100, 0xc57, 0x5, 0x1, 0xbab7, 0xff, 0x3b71, 0x9, 0x6, 0x7fffffff, 0x40, 0x7, 0x9], 0x2c, [':\x00', '/proc/self\x00', '/proc/thread-self/attr/current\x00']}, ["", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40000c0) 04:36:38 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x100900}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:38 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_io_uring_complete(0x0) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4dc6139d273c0e264df79a41d9387d2ca31d946b697d0c5636e3ff07bbdd8b253a02b3cce8ed0780583732a82b619e15afa1f1483cafeed7acc08ef37f1bbd423abeb15b00326ebe6d7b2fe1994b2269b5d95ac1415e22e1bb9ecdda7af2e18329858670905548b55d22c90d246fdae6b7ebce571f9f78941bd3ee9662ac75cd7fb4da4d18d19884e8113fc6f8ea4b1fae43d01a0dc859000000"], 0xb6) 04:36:38 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x7ac6842291b0704c, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4e21, 0xfffffffe, 'ovf\x00', 0x11, 0x10001, 0x54}, {@remote, 0x4e03, 0x4, 0x0, 0x2, 0x6}}, 0x44) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000000)={{&(0x7f00000004c0)={'Accelerator0\x00', {&(0x7f0000000200)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingEnabled\x00'}, {0x100000000}, {&(0x7f0000000140)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingNumResponses\x00'}, {0x7b}}}}}, {&(0x7f0000000440)={'Accelerator0\x00', {&(0x7f0000000380)=@adf_str={@format={'Dc', '1', 'RingSymTx\x00'}, {"87bc868d47784dce2220eb5f6658abaa404251e6a5400d6b84e5d24d07018f0707471f94b11ce898ec467afb1b312819ac3f28d156f8dd59046075b2ba509b0b"}, {&(0x7f00000002c0)=@adf_hex={@format={'Cy', '5', 'RingAsymTx\x00'}, {0xe608}}}}}}}}}, 0xff}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='cha0'], 0x3c) 04:36:38 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="83444a4e126d310d274520f36b"], 0x2b) 04:36:38 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) r1 = mq_open(&(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x1, 0x23, &(0x7f00000000c0)={0x3, 0x8000, 0xbf5, 0x100000001}) mq_timedreceive(r1, &(0x7f0000000100)=""/119, 0x77, 0x66, 0x0) 04:36:38 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:38 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:38 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000d23260cd00", @ANYRES16=r2, @ANYBLOB="20002cbd7000fcdbdf250000000014002000200100000000000000000000000000020c001600aa0a000000000000"], 0x34}}, 0x1) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:38 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x600000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:38 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7065400d81726f66698265202f"], 0x2b) 04:36:39 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000140)={'macvlan0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=&(0x7f00000000c0)={0x80000001, 'wg0\x00'}}}) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7065726d686174203035ac037138559fa064b5cddda977de4eff5c99daaf2c50956fc82e2714ec1fc397fe711ebd9d98947d06c64266c8fe03e8dc69dbaad43215c7fd9df23ab3964f5675e428594dc984ef2dcccecbe9e1f331d8e60755b4a0753b9dbbcd264b3557b6d0255839c48e5fbf559fb8c138ad5cd7535e003c60"], 0xb6) 04:36:39 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:39 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:36:39 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:39 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80171e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:39 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x2b) 04:36:39 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) 04:36:39 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0xb6) 04:36:39 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) memfd_create(&(0x7f0000000000)='}\x00', 0x4) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)) 04:36:39 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8000, 0xfffffffffffff000}) 04:36:39 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80ffff}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:39 executing program 2: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x3ed, 0x100, 0x70bd29, 0x25dfdbfb, "779de0c032011dc8ec957fbd427b599a48bed9b1127373d645f533b02211beacdfa6462146788403aa6330d2d4407f5ea3973ba68f055ad61afce36ac617e70506bc9476840bb33926bdd8469f6366f94c876b2ac65535e6e3bc46229b1b37ab07a0d43579ccc4713878e9a1984edd32a88ac64d4fae896ab6bc6e24b969", ["", "", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x4000046}, 0x4000000) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self\x00', 0x8800, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10, 0x80000) pidfd_getfd(r1, r2, 0x0) 04:36:39 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0100d9a4592543f0ee03000900ff000001080006040004aaaaaaaaaaaaac1414aa004c040001"], 0x26) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="ba76be19f567e9bcebc8aaf4c9d60f23e5fbbf1e09fac09605df7505424f9f3db9476a82f050ec371cd56be177c6a9af55529c912a0f565cb25fb265b784300d971035cab6bbdd36daed1e2581d6800ed73512c72d60576105954b1173dc2771a8193f545c94b42c4b46afe7b5ff111c64"], 0x2b) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r4 = pidfd_getfd(r2, r0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000280)=""/209, 0xd1, 0x5, &(0x7f00000003c0)={r5, r6+60000000}) waitid$P_PIDFD(0x3, r3, &(0x7f0000000100), 0x8, &(0x7f0000000400)) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, 0x0) mq_timedsend(r7, &(0x7f0000000180)="d2afd3d1f1d8f2443c9cbd7c914ee56d65110de069a442263943f13febcbda46a82a388a306ebd3d098fea8bbbae870e3ac77566058d1c5f01799c9dcb6685371669967764a1e4db02bbc35e449559bb4d44b93ceee870208e8795c091b8cd725e71b39f38ca052c8671aecaa74b8911", 0x70, 0x7c0000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000004c0)={0x1000, "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"}) 04:36:40 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x34}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:40 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:40 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='p0'], 0xb6) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x410880, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r1, &(0x7f0000000100)=@profile={'changeprofile ', '/proc/thread-self/attr/current\x00'}, 0x2d) bind$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @none={0x0, 0x1}}, 0x14) 04:36:40 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x3c) r2 = memfd_create(&(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x7) r3 = memfd_create(&(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x5) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x0, 0x5, [{r2, 0x0, 0x4000, 0x2000}, {r0, 0x0, 0x10000, 0x1000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000}, {r3, 0x0, 0xfffffffffffff000, 0x8000}, {r4, 0x0, 0xfffff000, 0x100010001c000}]}) 04:36:40 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1c2815b1e919d2ef54e0369c", @ANYBLOB="00022abd7000fd24fedc040007000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c805) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)="397df93474c61e8826942d7997accd1a03b49a10b1f74b71f7cd8f08b78f14ef073bafe00b99f05a81f333e470f9587d2199c1bd91f8b80e92ece70ed6abb7945ebb377e902d25bd34ea980bd1621759f903fbd85e", 0x55}], 0x1, 0x12, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00', r1) write$apparmor_current(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7065400d70726f66548265202f19b3b7bb9d32296b5790c0341212fc8b7a027ae6017ceb4d75ffd63279b9c3ff13010000800000000031af456c2d29b5c29bdf2b2d4272f7e1b12c43770607fa2cc11c3d45cfdf8dc5e12c2ee15b58c9d7e7be3c8099c35e3db7e748317860d5de6fc5e62cf852616a45d7475f4517231c8f4a9ff935a0"], 0x2b) 04:36:40 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc10000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:40 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000140)=0x40, 0x2) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000001c0)={0x1, 0x8000, 0x1, 0x7, 0xff, 0x1, 0x7, 0xf3, 0x6, 0x7, 0x7, "8d1adf17ec052b1f6df9cdc8b9f38a90769ec0ae2d70c0e86807276f632a11a5"}) write$apparmor_current(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="706588d9c53123709273420d70726f7f698265202f", @ANYRESHEX=r0, @ANYBLOB="dffb1464718537b830a1c38b47c3fa07bb4983ffdc6475c10a39b695588c2368586bbcffafceac1e03ec97465504097ac8db4e9dee94676572a1f36e9c4ce8f5ddc7466dabe9879baa9b4cade20dbdbb933cd8c2751b4f131a184309ce234c15be1b15f63041045f5c43f4bb2240e7111f56c9f81a889ae511fc7744d6e55ca0f198f7bc28df9ab3b2b94c44c97ad8983acf2f50ba119e0eb1ee03b3ddb4abbb85ad24ec5796"], 0x2b) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, [], 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0x48800) 04:36:40 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = msgget$private(0x0, 0x10) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/119) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat \a'], 0xb6) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000140)=""/4096) [ 1676.440272][ T4936] AppArmor: change_hat: Invalid input '0' [ 1680.664038][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 1680.664069][ T36] audit: type=1400 audit(1615783000.527:431): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5261 comm="syz-executor.0" 04:36:40 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="201db79a2600dd1c50bd615d32599b82ce66458dedfabf40c6e83891296094a042abb5f058fbd06a7d608aad27d7be247ed42e1b8df6ff9ab4d7799c560a29dc0e22a08af7cc998759761cd0eb4957b287e1eb4821e6afd48a26394bcac856951fc6ea7d08a8dcf6c38f5c1fef5e904edf406574a7abb44e2541c46cd091e65a38879f43263eddd58b1cef6450fc0ff0a1fbca2c640d8a9db8d3176d8eca29141583001c69119a11a99d8c2a153af5280f41a9a366dd726c182bfe4e4f", 0xbd, 0x8080, &(0x7f0000000000)={0xa, 0x0, 0x8001, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffa, 0x2}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) clock_gettime(0x0, &(0x7f0000003f40)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000003fc0)="04cf86bca0e654b6bbf6d8fb1fbaaaae015b910bc5676358a1bfbfc6429879e4658d294503a636bf782ff40411556f437a0e9a8266ab6182477660bbc4bccfe187db5da17e1d", 0x46, 0x8, &(0x7f0000001240)={0x77359400}) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000000540)=@ipx, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/175, 0xaf}], 0x1, &(0x7f00000006c0)=""/5, 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/134, 0x86}, {&(0x7f00000007c0)=""/27, 0x1b}, {&(0x7f0000000800)=""/152, 0x98}, {&(0x7f00000008c0)=""/139, 0x8b}, {&(0x7f0000000980)=""/66, 0x42}, {&(0x7f0000000a00)=""/170, 0xaa}, {&(0x7f0000000ac0)=""/192, 0xc0}, {&(0x7f0000000b80)=""/132, 0x84}], 0x8, &(0x7f0000000cc0)=""/182, 0xb6}, 0x80}, {{&(0x7f0000000d80)=@isdn, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e00)=""/16, 0x10}, {&(0x7f0000000e40)=""/245, 0xf5}, {&(0x7f0000000f40)=""/220, 0xdc}, {&(0x7f0000001040)=""/148, 0x94}], 0x4, &(0x7f0000001140)=""/128, 0x80}, 0x6}, {{&(0x7f00000011c0)=@nfc, 0x80, &(0x7f0000001640)=[{&(0x7f0000001240)}, {&(0x7f0000001280)=""/185, 0xb9}, {&(0x7f0000001340)=""/117, 0x75}, {&(0x7f00000013c0)=""/80, 0x50}, {&(0x7f0000001440)=""/182, 0xb6}, {&(0x7f0000001500)=""/224, 0xe0}, {&(0x7f0000001600)=""/26, 0x1a}], 0x7, &(0x7f00000016c0)=""/20, 0x14}, 0x10001}, {{&(0x7f0000001700)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002840)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/156, 0x9c}], 0x2}, 0x9}, {{&(0x7f0000002880)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/74, 0x4a}, {&(0x7f0000003980)=""/208, 0xd0}, {&(0x7f0000003a80)=""/237, 0xed}], 0x4}, 0x7fffffff}, {{&(0x7f0000003bc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003c40)=""/235, 0xeb}], 0x1}, 0x2}], 0x7, 0x0, &(0x7f0000003f80)={r2, r3+60000000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7, 0x80, 0x81, 0x1, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x64, 0x0, 0x2, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@noop]}}}}}) r5 = syz_io_uring_complete(0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x12, r5, 0x3ff) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf25060000000800030005000000080003000600000008000200000000000800020003000000080003000500000044000180080006000400000014000400fc020000000000000000000000000000140004000000000000000000000000000000000108000700", @ANYRES32=r4, @ANYBLOB="0800060003000000080002000200000014000400fc000000000000000000000000000001060001000a000000060005004e2400"/64], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8001) getpeername$ax25(r1, &(0x7f0000000480)={{0x3, @netrom}, [@rose, @netrom, @netrom, @bcast, @netrom, @null, @default, @rose]}, &(0x7f0000000500)=0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', r4, 0x20, 0x700, 0x0, 0x7, {{0x13, 0x4, 0x0, 0x8, 0x4c, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xbe, 0x3, 0x1, [{@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x40}, {@dev={0xac, 0x14, 0x14, 0x2a}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x7}, {@multicast1, 0x3919}]}]}}}}}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='chaygehat 0'], 0x3c) [ 1680.714609][ T36] audit: type=1400 audit(1615783000.527:432): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5261 comm="syz-executor.0" 04:36:40 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xf0ff20}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:40 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3400}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1680.753923][ T36] audit: type=1400 audit(1615783000.607:433): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5274 comm="syz-executor.0" [ 1680.791437][ T36] audit: type=1400 audit(1615783000.607:434): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5274 comm="syz-executor.0" 04:36:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf2506000000080002000600000008000300070000004c0001800600010002000000060001000200000005000200ff00000014000400fe8000000000000000000000000000bb080006000700000014000400fe8000000000000000000000000000aa1800018014000400fc02000000000000000000000000000008000300040000000c000180060001000200000024000180080007"], 0xdc}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100025bd7000fbdbdf25020000001c000180080006000200000008000300ac141417080006000400000014000180080006000200000008000700", @ANYRES32=0x0, @ANYBLOB="0000005500000000001f9039da461a7e829dc25f7903d192fa0f2446e698c0e579453c2a0d06ee90bf428b0e4068f2c3657da2da0ba115e51f"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) 04:36:40 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1680.820305][ T5284] split_token_from_name: 30 callbacks suppressed [ 1680.820317][ T5284] AppArmor: change_hat: Invalid input '' 04:36:40 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:40 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:40 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400000, 0x0) [ 1680.848984][ T36] audit: type=1400 audit(1615783000.717:435): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5282 comm="syz-executor.3" [ 1680.853598][ T5284] AppArmor: change_hat: Invalid input '' [ 1680.856908][ T5295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:36:40 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:40 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:40 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat B'], 0xb6) [ 1680.916763][ T36] audit: type=1400 audit(1615783000.787:436): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5287 comm="syz-executor.0" [ 1680.928825][ T5306] AppArmor: change_hat: Invalid input '0' [ 1680.934768][ T5306] AppArmor: change_hat: Invalid input '0' [ 1680.937172][ T5308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:36:40 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000000)={0x2ed1, 0x8, 0x7}) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2b) 04:36:40 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:40 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x210400, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={r2, 0x41, 0x1000000, 0x2000000000000}) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000080)=@profile={'stack ', '/proc/thread-self/attr/current\x00'}, 0x25) 04:36:40 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="70597488762030"], 0xb6) 04:36:40 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x43c, 0x3f4, 0x20, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0x28, [0x8, 0x800, 0x60, 0x3, 0x1df1, 0xfffff801, 0x8, 0x6, 0x9, 0x2, 0xfff, 0x9a8, 0xfffffff9, 0x8, 0x1, 0x8, 0x5a2, 0x3, 0x7, 0x3fcc2293, 0x3, 0x5, 0x401, 0x8000, 0x3, 0x8, 0x1efc, 0x8, 0x3d, 0x200, 0x7fff, 0x0, 0x3ff, 0xfffffffe, 0x3000000, 0x8, 0x1000, 0x4, 0x4, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x80000000, 0x80, 0x4, 0x5, 0x800, 0xb3, 0xf2a2, 0x5, 0xfffffffc, 0x0, 0x8001, 0xffffffa4, 0x2, 0x7, 0x0, 0x13, 0xfffffff8, 0x4, 0x6cc0], [0x8, 0xb04, 0xff, 0x8efc, 0x3, 0x420, 0x0, 0x7a, 0x6, 0x4, 0x9, 0x80000001, 0x34fe, 0x5, 0xcd8, 0x400, 0x1, 0x8, 0x80000000, 0x7fffffff, 0x80000000, 0x7, 0x465, 0x6, 0x7fffffff, 0x8, 0xed06, 0x1f, 0xada, 0x101, 0x6cc, 0x2, 0x10000, 0x1, 0x5, 0x7, 0x5, 0x1, 0xd51, 0x125, 0x7, 0x0, 0x401, 0x91, 0x2, 0x80000000, 0x3ff, 0x5, 0x80000000, 0x6, 0xdd, 0xe10, 0x7, 0xfffff000, 0xe0, 0x3, 0x3, 0x8, 0x2, 0xfffffffd, 0x4, 0x4, 0x200, 0x1], [0x4, 0x1, 0x4, 0x1, 0x1, 0x2, 0x1000000, 0x7, 0x6, 0x7f, 0x0, 0x6, 0x7, 0x7f, 0x9, 0x9, 0x6, 0x5, 0x4, 0x80000000, 0x3f, 0x2, 0x2, 0x2, 0x8, 0x25b, 0x3, 0x5, 0xffff800c, 0x789, 0x0, 0x5, 0x9, 0x3, 0xe52, 0x2, 0xfffffff7, 0x2, 0x3, 0x6, 0xfff, 0x25fd, 0x6b, 0x0, 0x7fffffff, 0x7, 0x5, 0x8, 0x0, 0x3, 0x3, 0x1, 0x6, 0x9, 0x200, 0x8, 0x7, 0x4ce, 0x0, 0x3, 0x7, 0x7, 0x8001, 0x3], [0x80000001, 0x5, 0xfffc0000, 0x80e, 0x5b5, 0xffffdfc2, 0x80, 0x8, 0x2, 0x7ff, 0x9, 0x6, 0xfffffffa, 0x8, 0x1, 0x1, 0x7fffffff, 0x7, 0x55159961, 0x3f, 0x43d, 0x9, 0x2, 0x80000000, 0x4, 0x3, 0x0, 0x7f, 0x81, 0xffffffff, 0x9, 0x45c, 0xfff, 0xfffffffd, 0x200, 0x93, 0x1, 0x3, 0x9, 0xffffff10, 0x7, 0x4, 0x8001, 0x4, 0x5, 0x6, 0x4, 0x1000, 0x7, 0xee15, 0x1, 0x4, 0xfffff37e, 0x200, 0x2, 0x10000, 0x80000001, 0x200, 0x1000, 0x101, 0x7, 0x100, 0xfff, 0x8], 0x1a, ['tunl0\x00', 'syztnl2\x00', 'tunl0\x00', '\x00', 'ipvs\x00']}, [""]}, 0x43c}}, 0x40080) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3f5, 0x800, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000005) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x6, 0x3f}, 0x2) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:40 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:40 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:40 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2040000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:41 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="70bb37e4bcd561a71f"], 0xb6) 04:36:41 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x453, 0x400, 0x70bd2c, 0x25dfdbfe, "657b8c1ae4200a50fb59b853b38659e14c8d4f39c17b53aed4a45aa47cbcec778eb264c1be413b205bdeb57fdd0cc7ff98be54cd2183e4ef9dd71cc5b06c5a1a44caed8e8f", [""]}, 0x58}, 0x1, 0x0, 0x0, 0x4400}, 0x4001) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7065400d70726f66698265202f4349c41fde8ba0aabcfbaf3d86018c15d1487067bf4ebcaeb7c7386c84005a876972337c73b4359d7a7e899a6005596ad4157856b8bc137562fc81d6aeddd98a7a0b588b314b1192b90acbb55256e4073c5cfc897a932c70a30dc7b08c796d759b8341f1e8"], 0x2b) [ 1681.014660][ T5315] AppArmor: change_hat: Invalid input '0' [ 1681.072698][ T36] audit: type=1400 audit(1615783000.937:437): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5328 comm="syz-executor.0" 04:36:41 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x30, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x80800) 04:36:41 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x422a80, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x1, 0x1000000, 0x8000}) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="70651cd998e312353d3c0ab3807ad24b96b00017000000000000000000"], 0x2b) 04:36:41 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) socket$inet6_sctp(0xa, 0x5, 0x84) [ 1681.143649][ T36] audit: type=1400 audit(1615783000.957:438): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5330 comm="syz-executor.2" [ 1681.160652][ T5337] AppArmor: change_hat: Invalid input '0' [ 1681.163766][ T36] audit: type=1400 audit(1615783000.967:439): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=5328 comm="syz-executor.0" 04:36:41 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:41 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:41 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0xb2e5, &(0x7f00000000c0)=0x2) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='permhat 0'], 0xb6) [ 1681.226351][ T5357] AppArmor: change_hat: Invalid input '0' [ 1681.235414][ T5357] AppArmor: change_hat: Invalid input '0' [ 1681.249898][ T36] audit: type=1400 audit(1615783000.967:440): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5328 comm="syz-executor.0" 04:36:41 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="70c55eeab0726f66698265202f", @ANYRESDEC], 0x2b) 04:36:41 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x2b74, &(0x7f0000000080)={0x0, 0x4ab6, 0x4, 0x2, 0x6a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x88200, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f00000003c0)={0x2000, 0x84, 0x14}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="6368616e676568617420307aa482bafe2de42061f6eeeb57517d407b927ec811e5e2634336d5a9611b8526691f8b13b8cea2e345eaf35f354b5df7d343fbc7f37897e6675e8adf82271e81ea22e351ea7b3e31f1b6c8c384af3331c1eeb41a0cfe71d7d441f9c201e9f71598e2a01afde929ec24b42c4abf4296edb96af39d032f12c8eab9e82af882b69cb614f9d369156b95084004b5b73c080db1453c5b57942229de4b05cd98bb1b8fe611c3cdfe8f15e0da0e518cb6f18c8a69377e8376fcf4d2be2fb582"], 0x3c) 04:36:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1681.289663][ T5364] AppArmor: change_hat: Invalid input '0' 04:36:41 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="82f1a3a888d9c925420eb82e1a52d787de2be1824eec2a273b35857d960d74a378a252457d1a490fafff347a8899c715a030c48056e9ca64f547a4c509748abf405c915bb93bbf656a4824bd12d2f562a4619f8cf2bd3c345c739fa752303c41a99e305d6773", @ANYBLOB="5dcb7d00c6c143fd432e669c85b35c9e90d02d0eb2f6cf167fe734f08428e95132c0ca43f396b85c069d3d95b483de8a2b7d16ab2060b1220e58ccc2985afb345f89827caf555284b0c472a2e0b601ef81557b2e332fa5daa3c904daae3636f65a113977ba909ff0d9e94411613c252035bd33045d85d627bf4d48370ad1727d67e899cc4360e562a6196f4341bef2de78", @ANYRES64, @ANYBLOB="111b42edd00479647bb849efde7d1534031d20f0dc647f5fe76d002e", @ANYRESOCT=r0, @ANYRES16=r1], 0x2b) 04:36:41 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:41 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:41 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x8400, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xb6) 04:36:41 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='c(angehat 0'], 0x3c) r1 = syz_io_uring_complete(0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0)) 04:36:41 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x2b74, &(0x7f0000000080)={0x0, 0x4ab6, 0x4, 0x2, 0x6a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x88200, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f00000003c0)={0x2000, 0x84, 0x14}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="6368616e676568617420307aa482bafe2de42061f6eeeb57517d407b927ec811e5e2634336d5a9611b8526691f8b13b8cea2e345eaf35f354b5df7d343fbc7f37897e6675e8adf82271e81ea22e351ea7b3e31f1b6c8c384af3331c1eeb41a0cfe71d7d441f9c201e9f71598e2a01afde929ec24b42c4abf4296edb96af39d032f12c8eab9e82af882b69cb614f9d369156b95084004b5b73c080db1453c5b57942229de4b05cd98bb1b8fe611c3cdfe8f15e0da0e518cb6f18c8a69377e8376fcf4d2be2fb582"], 0x3c) 04:36:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6040000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:41 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[], 0x3c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x181700, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x8000, &(0x7f0000000100)=0x2) 04:36:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:41 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRES16=r2, @ANYRES64=r3, @ANYRES16=r1, @ANYRESOCT=0x0], 0xb6) 04:36:41 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x2b74, &(0x7f0000000080)={0x0, 0x4ab6, 0x4, 0x2, 0x6a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x88200, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f00000003c0)={0x2000, 0x84, 0x14}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="6368616e676568617420307aa482bafe2de42061f6eeeb57517d407b927ec811e5e2634336d5a9611b8526691f8b13b8cea2e345eaf35f354b5df7d343fbc7f37897e6675e8adf82271e81ea22e351ea7b3e31f1b6c8c384af3331c1eeb41a0cfe71d7d441f9c201e9f71598e2a01afde929ec24b42c4abf4296edb96af39d032f12c8eab9e82af882b69cb614f9d369156b95084004b5b73c080db1453c5b57942229de4b05cd98bb1b8fe611c3cdfe8f15e0da0e518cb6f18c8a69377e8376fcf4d2be2fb582"], 0x3c) 04:36:41 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:41 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:41 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2648c1, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@hat={'permhat ', 0x2, 0x5e, ['/proc/thread-self/attr/current\x00', '(.}*[#{]-{^\\.)\x00', '/proc/thread-self/attr/current\x00', '\x00']}, 0x69) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:41 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xb6) 04:36:41 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x2b74, &(0x7f0000000080)={0x0, 0x4ab6, 0x4, 0x2, 0x6a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x88200, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f00000003c0)={0x2000, 0x84, 0x14}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="6368616e676568617420307aa482bafe2de42061f6eeeb57517d407b927ec811e5e2634336d5a9611b8526691f8b13b8cea2e345eaf35f354b5df7d343fbc7f37897e6675e8adf82271e81ea22e351ea7b3e31f1b6c8c384af3331c1eeb41a0cfe71d7d441f9c201e9f71598e2a01afde929ec24b42c4abf4296edb96af39d032f12c8eab9e82af882b69cb614f9d369156b95084004b5b73c080db1453c5b57942229de4b05cd98bb1b8fe611c3cdfe8f15e0da0e518cb6f18c8a69377e8376fcf4d2be2fb582"], 0x3c) 04:36:41 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000001340)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000013c0)=0x80) bind$can_j1939(r1, &(0x7f0000001400)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x2}, 0xfd}, 0x18) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4662fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0xb6) 04:36:41 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:41 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x18000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:41 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x2b74, &(0x7f0000000080)={0x0, 0x4ab6, 0x4, 0x2, 0x6a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x88200, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000003c0)={0x2000, 0x84, 0x14}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456}, 0x88) 04:36:41 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:41 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x490201, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000400)={{&(0x7f0000000380)={'KERNEL\x00', {&(0x7f0000000180)=@adf_str={@format={'Dc', '5', 'NumConcurrentAsymRequests\x00'}, {"9b86d5060ed19af9671dd4be1ae914f3ee66dd8dd4c164977ec9c5dcaaef8b6de469623c080bd0d1a250719c0c6e92b3a3dfa206796e0f67c6e8324640da0e7e"}, {&(0x7f00000000c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x10000}}}}}, {&(0x7f0000000300)={'GENERAL\x00', {&(0x7f0000000240)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}, {0x80}}}}}}}, 0x4c}) 04:36:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1e000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:41 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x2b74, &(0x7f0000000080)={0x0, 0x4ab6, 0x4, 0x2, 0x6a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x88200, 0x0) 04:36:41 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7065726d686174203004c6c9e10ec1ec70044c539662b7198a1d2d57263cb911d85335eb9f4b6f9ec88b8c978c73d8936ba87e297a646dcbe119758b541ee7bc89b35345baa283038b9b2ccfcfb83c0956b4f882ca3d"], 0xb6) socket$nl_route(0x10, 0x3, 0x0) 04:36:41 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc0}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000081) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) 04:36:41 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x2b74, &(0x7f0000000080)={0x0, 0x4ab6, 0x4, 0x2, 0x6a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1e178000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:42 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:42 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:42 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="cb4fb4"], 0xb6) r1 = socket(0x23, 0xc, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100)=0xc8d, 0x4) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x100, &(0x7f00000000c0)=0x2) 04:36:42 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x400, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000000c0), 0x8, &(0x7f0000000140)) 04:36:42 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:42 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:42 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0xb6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) 04:36:42 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000000)=0x80) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x3, 0x4) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='#hangehat 0'], 0x3c) 04:36:42 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20fff000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:42 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:42 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:42 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7065726d6861742030dd2d805ce49fc9e870a899a9d37ba30a7c8cb60c23bc693a6d74da0d020000000c0cc8f00800b5e8c7482a17cc0800c939af3bf380ba016692c2b206af71e7292bbe39edf5a6c7a9fbfe6e6840478c0b187a61313e464dac5c768bba91c5f5c1e6c376cfdb981bec20f78dd01288d81adc928118087673f3c8702c5088f4cd5ab9dc675b02fa5b7d3962213cd0d1d72c44c239f0984949ea955bb7ca3ebcffd20f50d541a0f4b229d914ade34af5ecbcfd9a5fe3dbbfe0e46b77c48975b0ebbcf0e0b04660ec"], 0xb6) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4080, 0x0) 04:36:43 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc10}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:43 executing program 3: semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000000)=0x2) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = semget(0x3, 0x2, 0x12) semctl$SEM_STAT_ANY(r1, 0x1, 0x14, &(0x7f0000000140)=""/4096) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000080)=0x4) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ebb40261747116ed66487c1d5d2c6d6683cdb29f4f5de616b21f538ee303c9bb95312d9f75dc056516e91ed137fc992eb587a61efe5d07ac852dbfc4aca46be8e21b6ed545d2c7a873f1c58076b707392babd72aa332c835378c8d2adf4ec99b6e988b79fe807500d46c541ed90b7741a7f054c0e88dd300000000"], 0x3c) 04:36:43 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x24000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:43 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:43 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0xb6) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x0, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000804}, 0x48014) 04:36:43 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) 04:36:43 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7060934d2387baa30f8ca838e39c9465726d6861742030"], 0xb6) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 04:36:43 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2a000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:43 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:43 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x9, 0x71f, 0x7bd, 0x1ff, 0x5, 0x8000, 0x3, 0x1f4}, &(0x7f0000000140)={0x1, 0x8, 0x9, 0x800, 0x2, 0x2, 0x3, 0x3}, &(0x7f00000002c0)={0x400, 0x3, 0xa834, 0x1, 0x5, 0x6, 0x3, 0x982}, &(0x7f0000000340)={r1, r2+10000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0xffff]}, 0x8}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000180)={{&(0x7f0000000440)={'Accelerator1\x00'}}, 0x9}) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000400), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00808b0000000064000000034725001c00680000102f7b780a010102ffff00000200"]}) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 04:36:43 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:43 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='reno\x00', 0x5) r1 = syz_io_uring_complete(0x0) write$apparmor_current(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7065726d6800000000f37de5b207e4d9108c1f62f91688b573aa04ef5ba815ba3151ac8bf62becf4da5572ce562199ff4bbd61d29a0f45301dea82adfa6cadefeacc89ce2c94f7848c533adb2f52e97f14ebba8fb9accde9d47a1a319c464a39cbc632912c2eb8a70891eed9071e590146e0bfba0be96be48db6480327f025b1727a876de13c9528715c1df0fcc379409053c0fdf553721e5841e02f454fa13d8547d5d875ca36046ead872d56e211e172ac926872de09c21b57ea1ad0def0558ac9b1b25221305ad0903e4121b1401435f7868fafe3d3c67788fce9dd077135e121a033186f188abf0b5c74b049d636a3365105d58f"], 0xb6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x90282, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000440)={0xdf, "a98afac7532e8f07dc3e30e5951716d1fee38af30905f5bc92a6a792bdee407bc526e620b912eae53c7689e661608db0cc69a8ecfdf2f63c97250f57bb2cbabf996e9ed32346a9358dd30315a6482fac92d91f8c2935eada3df77f37d673b23e6dab7950632984f02eda00a781fb48650f0be484d937190c0e94794154011f9350713b0973a4d85b4212c9c7a9a6ee8abbdbad888a064b25c602305c58f39da91e63c07b4dcef44f5c27978b8d8f235c1546d19248f171ac86c17064f6b36c8841bff7731850f0bfdc99dcbb08dc504579ccd9ea6afd1372b29c39ad0fab06"}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) pidfd_getfd(r1, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x94, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/pro\x06/thread-self/attr/cu\x06rent\x00') 04:36:43 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:43 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:43 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x30000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:43 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xb6) 04:36:43 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x83eb, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:43 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x3c) 04:36:43 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:43 executing program 0: syz_io_uring_setup(0x687, 0x0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:43 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:43 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r2], 0xb6) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080)) 04:36:44 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:44 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='changehat 0'], 0x3c) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0x13, [@multicast2]}]}}}}}) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100)=0x40, 0x1) write$apparmor_current(r1, &(0x7f00000000c0)=@hat={'permhat ', 0x2, 0x5e, ['/&.,\x00']}, 0x20) 04:36:44 executing program 0: syz_io_uring_setup(0x687, 0x0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:44 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7065726d68617420302c2d7535075afead87f047a1a467d399d337b905abc654999a4a328a24a4218fd936a7ca94e44af9138dbbe32662fba02d9ea4f0d2861d5926c710ec19883c"], 0xb6) 04:36:44 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3c000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:44 executing program 0: syz_io_uring_setup(0x687, 0x0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:44 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getpeername$ax25(r1, &(0x7f00000000c0)={{0x3, @rose}, [@null, @bcast, @netrom, @default, @remote, @remote, @rose, @default]}, &(0x7f0000000140)=0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000300)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) write$apparmor_current(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="636858f0f8303030305a04303030303030347d00fc0000000000"], 0x25) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) 04:36:44 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x42000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:44 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:44 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT], 0x3c) 04:36:44 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:44 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:44 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="70ffffffff61749730"], 0xb6) recvmmsg(0xffffffffffffffff, &(0x7f0000002c40)=[{{&(0x7f0000000100)=@generic, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f0000000540)=""/125, 0x7d}], 0x6, &(0x7f0000000640)=""/119, 0x77}, 0x6}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/31, 0x1f}], 0x1, &(0x7f0000000740)=""/238, 0xee}, 0x4}, {{&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/98, 0x62}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/107, 0x6b}, {&(0x7f00000029c0)=""/110, 0x6e}, {&(0x7f0000002a40)=""/228, 0xe4}, {&(0x7f0000002b40)=""/45, 0x2d}], 0x7, &(0x7f0000002c00)=""/22, 0x16}}], 0x3, 0x22, &(0x7f0000002d00)={0x0, 0x989680}) recvfrom$l2tp6(r1, &(0x7f0000002d40)=""/88, 0x58, 0x1, &(0x7f0000002dc0), 0x20) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) accept4$tipc(r2, &(0x7f0000002e00)=@id, &(0x7f0000002e40)=0x10, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x480043, 0x0) 04:36:44 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x91000100}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:44 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="63ab15e93f68696e67659f"], 0x3c) r1 = syz_io_uring_complete(0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES32], 0x13f) 04:36:44 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:44 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:44 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffff}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netpci0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x8882) syz_emit_ethernet(0x104, &(0x7f0000000180)={@broadcast, @local, @void, {@x25={0x805, {0x0, 0x22, 0x23, "a0804575169e16afeb74e08f6ec07ae17f0cf401cfe5cb94b24d0d9469a850949c1638ed3365cbd906747fec05c667ba3896e616bfbb28b7435ee26af733755514ba20ad523d1590c5824c3bd0a24a36738b55734f87caac41f96a4a8a1c09c932b744a0154abc5ba6ca245f0ea25d5fed8598ab54da5382f92d0325afce8837bc37e0ce5b917460e0454439dd7bf84ad666f90f83cc924bde89e50fa2c741122f66c14057197daa9b75a4d19264ea6e8f48f8aed2aa5c253a5141baa88d39dbc87e865deb62ae074af46522dd60b8d819aac8cba95c16c8ffc2fa4527125acc064e63cc3e044276263c2e3ebf841caa3eb357"}}}}, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xb6) 04:36:44 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x366}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:44 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000000)={0x6, 0xd6f, 0x800, 0x3, 0x2, 0x7, 0x68, 0xff, 0x4, 0xff, 0x1f, "f84ea8118c90a7aa26353db17d2cbacec1ffc50f79e801efe8c9280cf26b67c7"}) 04:36:44 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:44 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065726d686174203041e957e01be066ada41a7fb641bdeead78c4729bf76981d2911fd3a3cd45146c43a30724e291966bd0d18b3c2163b18142808442e2b83a21fdff2c582a320fb2d78c19be35b82d3149e82c5af4aa5a42e987b20b986e4f81fbe679a0b9fd91ea1c5d419fab1b5823f6c6c8b5740ff0dcddc894913beee7ef835993db0d39f34b8fcd5bbe8ee1befd4b95266ec6dc7dfe6a"], 0xb6) 04:36:45 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e0000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:45 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 04:36:45 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="86a68044b4d4415474691b5238d38b2c53631766ca267f4cabe72eac1f5e4d483dd7c2c5e9103b8017b6f8f01143350f864f1a5ae7b008831abfb2552d71"], 0x3c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r3) 04:36:45 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:45 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) 04:36:45 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, 0x0, &(0x7f0000000340)) 04:36:45 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='chengehat 0'], 0x3c) 04:36:45 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x3c) 04:36:45 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:45 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffff8000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:45 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, 0x0, &(0x7f0000000340)) 04:36:45 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7060934d2387baa30f8ca838e39c9465726d6861742030"], 0xb6) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 04:36:46 executing program 3: sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x8, 0x70bd2c, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10000010}, 0x4) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101c00, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 04:36:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:46 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, 0x0, &(0x7f0000000340)) 04:36:46 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffc000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:46 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) 04:36:46 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:46 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), 0x0) 04:36:46 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000001240)=@hci, 0x80, &(0x7f0000001400)=[{&(0x7f00000012c0)=""/248, 0xf8}, {&(0x7f00000013c0)=""/24, 0x18}], 0x2, &(0x7f0000001440)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/69, 0x45}], 0x2, &(0x7f0000003500)=""/43, 0x2b}, 0x5}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/239, 0xef}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)}, {&(0x7f0000004740)=""/186, 0xba}, {&(0x7f0000004800)=""/6, 0x6}, {&(0x7f0000004840)=""/71, 0x47}, {&(0x7f00000048c0)=""/91, 0x5b}, {&(0x7f0000004940)=""/126, 0x7e}, {&(0x7f00000049c0)=""/20, 0x14}], 0xa, &(0x7f0000004ac0)=""/94, 0x5e}, 0xd1d7}, {{&(0x7f0000004b40)=@caif=@dgm, 0x80, &(0x7f0000006140)=[{&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/113, 0x71}, {&(0x7f0000005c40)=""/99, 0x63}, {&(0x7f0000005cc0)=""/210, 0xd2}, {&(0x7f0000005dc0)=""/210, 0xd2}, {&(0x7f0000005ec0)=""/83, 0x53}, {&(0x7f0000005f40)=""/85, 0x55}, {&(0x7f0000005fc0)=""/101, 0x65}, {&(0x7f0000006040)=""/216, 0xd8}], 0x9, &(0x7f0000006200)=""/83, 0x53}, 0x9}, {{&(0x7f0000006280)=@x25, 0x80, &(0x7f0000006540)=[{&(0x7f0000006300)=""/135, 0x87}, {&(0x7f00000063c0)=""/76, 0x4c}, {&(0x7f0000006440)=""/159, 0x9f}, {&(0x7f0000006500)=""/18, 0x12}], 0x4, &(0x7f0000006580)=""/204, 0xcc}, 0x2}, {{&(0x7f0000006680)=@phonet, 0x80, &(0x7f00000068c0)=[{&(0x7f0000006700)=""/251, 0xfb}, {&(0x7f0000006800)=""/173, 0xad}], 0x2, &(0x7f0000006900)=""/214, 0xd6}, 0x1}, {{&(0x7f0000006a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000006a80)=""/66, 0x42}, {&(0x7f0000006b00)=""/107, 0x6b}, {&(0x7f0000006b80)=""/70, 0x46}, {&(0x7f0000006c00)=""/222, 0xde}, {&(0x7f0000006d00)=""/203, 0xcb}], 0x5, &(0x7f0000006e80)=""/35, 0x23}, 0x5}], 0x7, 0x40000000, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:46 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), 0x0) [ 1681.291904][ T5364] AppArmor: change_hat: Invalid input '0' [ 1686.348693][ T5724] split_token_from_name: 25 callbacks suppressed 04:36:46 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:46 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:46 executing program 0: syz_io_uring_setup(0x687, &(0x7f0000000280), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f50000/0x1000)=nil, &(0x7f0000000300), 0x0) 04:36:46 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:46 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x210400, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={r2, 0x41, 0x1000000, 0x2000000000000}) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000080)=@profile={'stack ', '/proc/thread-self/attr/current\x00'}, 0x25) 04:36:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:46 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:46 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES64=r2, @ANYRES16=r3, @ANYRESOCT=r2, @ANYBLOB="7954d6b40cf157a0e3b2c831c793b7e59acb4e4060d81bb7f548554b9ff32cc1f09c9646a8bcd6d005e23f7c82590c0ef4c0012166f5a59e58b917d47b51058fafb0444856ebd054ad12a1938918c010800af2846507c3a7d9402f2c28d5701de74e837bbb253b248aeb94b22e3b748cbd89eca964837b3d939bcc653bc1bef2608b1086c3f50af68a6fc23dd4f67daaeca9d366f4f57adee7fd7550ec86cdc4e3e14c6198b197b2ae520232237e54b4324e01a8cb3deb26470dae82e1e10469482171d33108702ba7ead1a2046dad020abb24a6880e97620e743ce86e2da5179de83898c04987fe746f13437a1da624", @ANYRES64=r4, @ANYRES16], 0x2b) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x44c, 0x3f3, 0x8, 0x70bd26, 0x25dfdbfc, {0x1, 0x2, 0x39, [0x5, 0x8, 0x9, 0x81, 0x4, 0x3fffc00, 0x7fffffff, 0x4, 0x4, 0x6, 0x6, 0x10000, 0xffff5328, 0x8, 0x7fff, 0x1ff, 0x431, 0x8, 0x5, 0x800, 0x2, 0xb1, 0x7, 0x7f, 0x3, 0x2, 0x716, 0x80000000, 0x1e1, 0x40, 0x8, 0x3, 0x6c, 0x40, 0x29b8, 0x6, 0xfff, 0x9, 0x1000, 0xfffffc01, 0xb3f, 0x0, 0xffad355, 0x80000001, 0x2, 0x0, 0x7fffffff, 0x800, 0x100, 0x80000000, 0xffff5302, 0x4000, 0x5, 0x80000000, 0x5, 0x6, 0x6, 0x1bf, 0xa5d, 0x8, 0x1, 0x7fff, 0x20, 0x1], [0x800, 0x80000000, 0x2, 0x0, 0x401, 0x6180, 0x4a, 0x6, 0x6, 0x40, 0x97, 0x200, 0x401, 0x5, 0xd03, 0x2, 0x4f, 0x1, 0x5, 0x400, 0x6, 0x1ff, 0x9, 0x6, 0x8000, 0x1, 0x3f, 0x3, 0xffffffff, 0x80000001, 0x8000, 0x8edb, 0xdcc, 0xc4d, 0x2f999469, 0x2, 0xb6a6, 0x9, 0x8, 0x200, 0x5, 0x8, 0x2800, 0x5, 0xd4e6, 0x0, 0x1500, 0x7ff, 0x9, 0x3ff, 0x8001, 0x2, 0x5, 0xfffff4cc, 0x282fa696, 0xeb44, 0x80000001, 0x8000, 0x0, 0x9, 0x7fff, 0x8, 0x7f, 0x2], [0x3ff, 0x9508, 0xffff, 0x1ff, 0x4, 0x3, 0x485, 0xcb, 0x3, 0x20, 0x7, 0x2, 0x7c6, 0xfd, 0x3, 0x7339, 0x80, 0x1000, 0x5, 0xfff, 0x2, 0x2, 0x5, 0x1, 0x10000, 0x4, 0x2, 0x5, 0x1, 0x1, 0x3ff, 0x8, 0x2e6e, 0x8, 0x6, 0xff9, 0x9, 0x1, 0x0, 0xff, 0x800, 0x8ec, 0x1, 0x9, 0xcd0, 0x0, 0x4, 0xa1f, 0x40, 0x45ad, 0x4, 0x2, 0x27b8599f, 0x7fffffff, 0x2, 0x6, 0x1, 0x8, 0xd9c4, 0x3, 0x4, 0x6, 0x7, 0xfffffffb], [0x200, 0x6, 0x7ff, 0x4, 0x1, 0x9, 0x5, 0x6, 0xc7, 0x7ff, 0x2, 0x401, 0x1, 0x5, 0x2a04, 0xc6, 0x7ff, 0x9, 0x2, 0x7fffffff, 0x20, 0x1e0cbcee, 0x7, 0x9e19, 0x9, 0x0, 0x1ff, 0x8, 0xd21, 0x3, 0x0, 0x80000001, 0x8, 0x81, 0x9, 0x10001, 0x9, 0x1ff, 0x8, 0x3, 0x1, 0x5, 0x9, 0x80000000, 0xfffffff8, 0x1ff, 0x7f, 0xfffffffb, 0x5d2, 0x7dbf, 0x0, 0x100, 0xc57, 0x5, 0x1, 0xbab7, 0xff, 0x3b71, 0x9, 0x6, 0x7fffffff, 0x40, 0x7, 0x9], 0x2c, [':\x00', '/proc/self\x00', '/proc/thread-self/attr/current\x00']}, ["", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40000c0) 04:36:46 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'changeprofile ', '\x00'}, 0xf) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x3c) r1 = syz_io_uring_complete(0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@hat={'permhat ', 0x1, 0x5e, ['\x00', '^%-#\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/:\xbf)\x00']}, 0x83) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 1686.348704][ T5724] AppArmor: change_hat: Invalid input '0' [ 1686.522802][ T5756] AppArmor: change_hat: Invalid input '0' [ 1686.554934][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 1686.595639][ T36] audit: type=1400 audit(1615783006.418:451): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5762 comm="syz-executor.0" [ 1686.620626][ T36] audit: type=1400 audit(1615783006.428:452): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=5762 comm="syz-executor.0" 04:36:47 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[], 0x3c) 04:36:47 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:47 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'changeprofile ', '\x00'}, 0xf) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x3c) r1 = syz_io_uring_complete(0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@hat={'permhat ', 0x1, 0x5e, ['\x00', '^%-#\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/:\xbf)\x00']}, 0x83) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:36:47 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0)=0x0, 0xfffffffffffffffe) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000002240)) syz_io_uring_setup(0x7624, &(0x7f0000002100)={0x0, 0x9fd4, 0x4, 0x3, 0x24c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000002180), &(0x7f00000021c0)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000002200)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x9) 04:36:47 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'changeprofile ', '\x00'}, 0xf) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x3c) r1 = syz_io_uring_complete(0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@hat={'permhat ', 0x1, 0x5e, ['\x00', '^%-#\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/:\xbf)\x00']}, 0x83) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:36:47 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0)=0x0, 0xfffffffffffffffe) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000002240)) syz_io_uring_setup(0x7624, &(0x7f0000002100)={0x0, 0x9fd4, 0x4, 0x3, 0x24c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000002180), &(0x7f00000021c0)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000002200)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x9) 04:36:47 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0)=0x0, 0xfffffffffffffffe) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000002240)) syz_io_uring_setup(0x7624, &(0x7f0000002100)={0x0, 0x9fd4, 0x4, 0x3, 0x24c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000002180), &(0x7f00000021c0)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000002200)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x9) 04:36:47 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x4]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1687.328838][ T36] audit: type=1400 audit(1615783007.198:453): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5780 comm="syz-executor.2" [ 1687.397256][ T36] audit: type=1400 audit(1615783007.268:454): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5788 comm="syz-executor.3" 04:36:47 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:47 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:47 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'changeprofile ', '\x00'}, 0xf) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x3c) r1 = syz_io_uring_complete(0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@hat={'permhat ', 0x1, 0x5e, ['\x00', '^%-#\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/:\xbf)\x00']}, 0x83) 04:36:47 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0)=0x0, 0xfffffffffffffffe) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000002240)) syz_io_uring_setup(0x7624, &(0x7f0000002100)={0x0, 0x9fd4, 0x4, 0x3, 0x24c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000002180), &(0x7f00000021c0)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000002200)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x9) 04:36:47 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1687.451098][ T36] audit: type=1400 audit(1615783007.288:455): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5793 comm="syz-executor.2" 04:36:47 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x5]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:47 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000002240)) syz_io_uring_setup(0x7624, &(0x7f0000002100)={0x0, 0x9fd4, 0x4, 0x3, 0x24c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000002180), &(0x7f00000021c0)) 04:36:47 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'changeprofile ', '\x00'}, 0xf) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x3c) syz_io_uring_complete(0x0) [ 1687.490340][ T36] audit: type=1400 audit(1615783007.358:456): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5799 comm="syz-executor.2" 04:36:47 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:47 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x8]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1687.571106][ T36] audit: type=1400 audit(1615783007.438:457): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5811 comm="syz-executor.2" 04:36:47 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000002240)) 04:36:47 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:47 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'changeprofile ', '\x00'}, 0xf) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x3c) [ 1687.642671][ T36] audit: type=1400 audit(1615783007.508:458): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5825 comm="syz-executor.2" 04:36:48 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:48 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:48 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) 04:36:48 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x10]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:48 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'changeprofile ', '\x00'}, 0xf) 04:36:48 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) 04:36:48 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1688.435930][ T36] audit: type=1400 audit(1615783008.308:459): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5837 comm="syz-executor.2" 04:36:48 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) 04:36:48 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) 04:36:48 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x18]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1688.490775][ T36] audit: type=1400 audit(1615783008.358:460): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5849 comm="syz-executor.2" 04:36:48 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:48 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:48 executing program 0: syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x502e, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) 04:36:48 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1e]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:48 executing program 3: syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:48 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) accept(0xffffffffffffffff, 0x0, 0x0) 04:36:48 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:48 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:48 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:48 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x24]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:48 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r1, r2+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70b1400d70726f66698265202fcafc9351684498a05ae860fb0895d730ba47b385c36298838bccc0c5288b10ba4a8c4d6d93149124c3bbd6da274e15371ee3d7cd77278cbabeffbc3479c4e3ecfb373673952d6fedb0de76452c27b5ab0ade8757a270c59945ff9834b45d8e92b58d2593af6f74e41d0e3f88986df63054a1a83b25690bf4e0a426bac5d8a9cb07205ca1d8de4da24eca1992a72601dc66aa1df2bfa4200d1a87a32c79fa572a9009f2fb797299956932542ce42d0f233a2fc6f16522248e8c7c6e84c62a9f23015648419b9b9f8609a7338c524a623a29"], 0x2b) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:48 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0xb6) socket(0xf, 0x5, 0x2) r1 = accept(0xffffffffffffffff, 0x0, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) accept(r2, 0x0, &(0x7f0000000140)) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="53dcb53a840967995cb9963bed48b3b2a498c959b45c365a67d784030abc", 0x1e, 0x4, &(0x7f0000000100)={0x77359400}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)) 04:36:48 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1688.629242][ T5871] AppArmor: change_hat: Invalid input '0' 04:36:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e0000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:49 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r0, r1+60000000}) accept$ax25(0xffffffffffffffff, &(0x7f0000001f80)={{0x3, @default}, [@remote, @default, @bcast, @default, @null, @netrom, @remote, @rose]}, &(0x7f0000002000)=0x48) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2a]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x80000000009) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:49 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x80000000009) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) [ 1688.759674][ T5896] AppArmor: change_hat: Invalid input '0' 04:36:49 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x80000000009) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:49 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:49 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/149, 0x95}], 0x6, &(0x7f00000004c0)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4}, 0xfffff000}, {{&(0x7f0000001700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f00000018c0)=""/171, 0xab}, {&(0x7f0000001980)=""/115, 0x73}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000001ac0)=""/181, 0xb5}, {&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x8, &(0x7f0000001d40)=""/238, 0xee}, 0x7f}], 0x3, 0x0, &(0x7f0000001f40)={r0, r1+60000000}) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x30]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) 04:36:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1689.457921][ T5906] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 04:36:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x36]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) 04:36:49 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000001f00)) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:49 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x80000000009) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) [ 1689.527051][ T5916] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 04:36:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3c]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:49 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:49 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) 04:36:49 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) [ 1689.617524][ T5931] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 04:36:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x42]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:49 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) 04:36:49 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1689.726482][ T5947] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 04:36:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x60]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) 04:36:49 executing program 2: syz_io_uring_setup(0x4de3, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:49 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:49 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) 04:36:49 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000002040)={0x0, 0xedb4, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x204]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1689.817281][ T5963] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 04:36:49 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:49 executing program 0: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:49 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:49 executing program 0: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:49 executing program 3: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e0000}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x402]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:49 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:49 executing program 0: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:49 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e000000000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:50 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x406]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:50 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:50 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x34}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:50 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:50 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:50 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x500]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:50 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000002040)={0x0, 0x0, 0x20, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:50 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x402]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:50 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x604]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:50 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:50 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x2, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:50 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:50 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xc10}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:50 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:50 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x95}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:50 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1800]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:50 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'changehat ', 0x4, 0x5e, ['/dev/autofs\x00', '/dev/autofs\x00', '@:#])\x00', '/dev/autofs\x00', '/dev/autofs\x00', '.-+/$\x00']}, 0x59) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r1, 0xae80, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x2b) 04:36:50 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:50 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00', '\x00']}, 0x8f) 04:36:50 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000002040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000020c0), 0xfffffffffffffffe) 04:36:50 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:50 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 04:36:51 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1e00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1689.936643][ T5983] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 04:36:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:51 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:51 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 04:36:51 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000002040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0xfffffffffffffffe) 04:36:51 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:51 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x100c}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:51 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:51 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) [ 1691.131629][ T6072] AppArmor: change_hat: Invalid input '0' 04:36:51 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000002040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0xfffffffffffffffe) 04:36:51 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2400]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:51 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:51 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3400}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1691.959452][ T6095] AppArmor: change_hat: Invalid input '0' 04:36:51 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000002040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0xfffffffffffffffe) 04:36:51 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2a00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:51 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00', '(^,\\!\x00']}, 0x8e) 04:36:51 executing program 3: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:52 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00', '/proc/thread-self/attr/current\x00']}, 0x88) 04:36:52 executing program 3: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:52 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b5937c84d0b26b29559e4959a769600089e091e735374634f214ce568006a3791c3ebe96eb29d31602d45278234b480ecd2a7a6040fac70c732bb23d4f6b3e7bebf7fefb4a1cf3f563b5f4d076b0a72faf57622c7447b1a89f42e16c65b977febea2d7f62900c3d50bf925850baae7185e86186119446838fe20d85dd5b43104d575765f7222f3d1a1e2e1f8870abc77a683bbf5c5341a22c78a247fdcd6fde8fc0725a4ca86dbe359c5e72d9e7725fabbd1f2e47150f21feb68bfd6a2c65cfea2ee0a31b7a579b961e1c290f401f136881551d21cca07a801841c5bf88b8bf6945e55f33374744d4fb977d91632233bb9f3c5e48a1b6e683e7e8c10235941f4f5"], 0x2b) [ 1691.999806][ T6099] AppArmor: change_hat: Invalid input '0' 04:36:52 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x7ec0}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:52 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:52 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2b) [ 1692.118560][ T6118] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1692.211649][ T6133] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1692.220865][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 1692.220877][ T36] audit: type=1400 audit(1615783012.098:467): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6130 comm="syz-executor.2" [ 1692.274806][ T36] audit: type=1400 audit(1615783012.138:468): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6136 comm="syz-executor.2" 04:36:52 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:52 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/dev/usbmon#\x00']}, 0x69) 04:36:52 executing program 3: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:52 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2b) 04:36:52 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3600]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:52 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00']}, 0x5c) 04:36:52 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:52 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3c00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:52 executing program 2: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2b) [ 1692.972310][ T6151] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1692.985997][ T36] audit: type=1400 audit(1615783012.858:469): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6147 comm="syz-executor.2" 04:36:52 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xc07e}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:52 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00']}, 0x3d) 04:36:52 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:52 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:52 executing program 2: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b5937c84d0b26b29559e4959a769600089e091e735374634f214ce568006a3791c3ebe96eb29d31602d45278234b480ecd2a7a6040fac70c732bb23d4f6b3e7bebf7fefb4a1cf3f563b5f4d076b0a72faf57622c7447b1a89f42e16c65b977febea2d7f62900c3d50bf925850baae7185e86186119446838fe20d85dd5b43104d575765f7222f3d1a1e2e1f8870abc77a683bbf5c5341a22c78a247fdcd6fde8fc0725a4ca86dbe359c5e72d9e7725fabbd1f2e47150f21feb68bfd6a2c65cfea2ee0a31b7a579b961e1c290f401f136881551d21cca07a801841c5bf88b8bf6945e55f33374744d4fb977d91632233bb9f3c5e48a1b6e683e7e8c10235941f4f5"], 0x2b) 04:36:52 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x4000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:53 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:53 executing program 2: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2b) 04:36:53 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00']}, 0x1e) 04:36:53 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x4200]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:53 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2b) 04:36:53 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:53 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x40000}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:53 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00']}, 0x1c) 04:36:53 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:53 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x6000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:53 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2b) 04:36:53 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:53 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:53 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2b) 04:36:53 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 04:36:53 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xff00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:53 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:53 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:54 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xca9a3b}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:54 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 04:36:54 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:54 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b5937c84d0b26b29559e4959a769600089e091e735374634f214ce568006a3791c3ebe96eb29d31602d45278234b480ecd2a7a6040fac70c732bb23d4f6b3e7bebf7fefb4a1cf3f563b5f4d076b0a72faf57622c7447b1a89f42e16c65b977febea2d7f62900c3d50bf925850baae7185e86186119446838fe20d85dd5b43104d575765f7222f3d1a1e2e1f8870abc77a683bbf5c5341a22c78a247fdcd6fde8fc0725a4ca86dbe359c5e72d9e7725fabbd1f2e47150f21feb68bfd6a2c65cfea2ee0a31b7a579b961e1c290f401f136881551d21cca07a801841c5bf88b8bf6945e55f33374744d4fb977d91632233bb9f3c5e48a1b6e683e7e8c10235941f4f5"], 0x2b) 04:36:54 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x10091]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:54 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:54 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2b) 04:36:54 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x40000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:54 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00']}, 0x1c) 04:36:54 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:54 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:54 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b5937c84d0b26b29559e4959a769600089e091e735374634f214ce568006a3791c3ebe96eb29d31602d45278234b480ecd2a7a6040fac70c732bb23d4f6b3e7bebf7fefb4a1cf3f563b5f4d076b0a72faf57622c7447b1a89f42e16c65b977febea2d7f62900c3d50bf925850baae7185e86186119446838fe20d85dd5b43104d575765f7222f3d1a1e2e1f8870abc77a683bbf5c5341a22c78a247fdcd6fde8fc0725a4ca86dbe359c5e72d9e7725fabbd1f2e47150f21feb68bfd6a2c65cfea2ee0a31b7a579b961e1c290f401f136881551d21cca07a801841c5bf88b8bf6945e55f33374744d4fb977d91632233bb9f3c5e48a1b6e683e7e8c10235941f4f5"], 0x2b) 04:36:54 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:54 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['\x00', '&\x00', '/proc/thread-self/attr/current\x00']}, 0x3d) 04:36:54 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:54 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x2b) 04:36:54 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x80000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:54 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:54 executing program 3: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:54 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x91000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:54 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x2b) 04:36:55 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x2b) [ 1693.037482][ T6160] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1695.058027][ T6269] aa_setprocattr_changehat: 9 callbacks suppressed [ 1695.058038][ T6269] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 04:36:55 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:55 executing program 3: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x2000000}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:55 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x100900]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:55 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3c00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:55 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x2b) 04:36:55 executing program 3: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:55 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:55 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) 04:36:55 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x34, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:55 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x400000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:55 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:55 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) 04:36:55 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) 04:36:56 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xc100000}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:56 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:56 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x600000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:56 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:56 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = mq_open(&(0x7f0000000000)='-]\x00', 0x800, 0xdf45c658756e928d, &(0x7f00000000c0)={0x8f, 0x0, 0xf91, 0xfffffffffffffff9}) mq_timedsend(r1, &(0x7f0000000100)="cabf6e7a31134c9bb18c24d9c80391245e6d2503c8dd89e4e97d5fc04d5e4e851d5c76f1e3377abaae35b3ec8599410f62147f", 0x33, 0x3, &(0x7f0000000140)={0x0, 0x3938700}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:36:56 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2b) 04:36:56 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00540000102f90780a010112ffffffff8307c7e000000200"]}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xffffffffffffffff}) 04:36:56 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x80171e]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:56 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2b) 04:36:56 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) [ 1695.060223][ T6273] AppArmor: change_hat: Invalid input, NULL hat and NULL magic 04:36:56 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:56 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2b) [ 1696.869091][ T6338] AppArmor: change_hat: Invalid input '0' [ 1696.953817][ T6349] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:36:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x34000000}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:57 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:57 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x80ffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:57 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00540000102f90780a010112ffffffff8307c7e000000200"]}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xffffffffffffffff}) 04:36:57 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b5937c84d0b26b29559e4959a769600089e091e735374634f214ce568006a3791c3ebe96eb29d31602d45278234b480ecd2a7a6040fac70c732bb23d4f6b3e7bebf7fefb4a1cf3f563b5f4d076b0a72faf57622c7447b1a89f42e16c65b977febea2d7f62900c3d50bf925"], 0x2b) 04:36:57 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:57 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2b) 04:36:57 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 04:36:57 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00540000102f90780a010112ffffffff8307c7e000000200"]}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xffffffffffffffff}) 04:36:57 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2b) [ 1697.756275][ T6366] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1697.765875][ T36] audit: type=1400 audit(1615783017.628:470): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6362 comm="syz-executor.2" 04:36:57 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xc0ffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:57 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1697.844021][ T6379] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:36:58 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3b9aca00}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:58 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00540000102f90780a010112ffffffff8307c7e000000200"]}) 04:36:58 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2b) 04:36:58 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 04:36:58 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xf0ff20]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:58 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 04:36:58 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b5937c84d0b26b29559e4959a769600089e091e735374634f214ce568006a379"], 0x2b) 04:36:58 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) 04:36:58 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1698.609223][ T6397] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:36:58 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 04:36:58 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xc07e0000}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1698.697573][ T36] audit: type=1400 audit(1615783018.568:471): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6404 comm="syz-executor.2" 04:36:58 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:36:58 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:58 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2b) 04:36:58 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:58 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) [ 1698.739980][ T6410] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:36:58 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2040000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:58 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2b) [ 1698.810068][ T36] audit: type=1400 audit(1615783018.678:472): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6419 comm="syz-executor.3" 04:36:58 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2b) 04:36:58 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:36:58 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x4000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:58 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) [ 1698.853790][ T6427] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1698.868202][ T36] audit: type=1400 audit(1615783018.708:473): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=6419 comm="syz-executor.3" [ 1698.964947][ T36] audit: type=1400 audit(1615783018.838:474): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6439 comm="syz-executor.3" [ 1698.989223][ T36] audit: type=1400 audit(1615783018.858:475): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=6439 comm="syz-executor.3" 04:36:59 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x5000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:59 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xffffff7f}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:59 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae"], 0x2b) 04:36:59 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:59 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:36:59 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:36:59 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:36:59 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:36:59 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae"], 0x2b) [ 1699.601144][ T36] audit: type=1400 audit(1615783019.469:476): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6451 comm="syz-executor.2" [ 1699.629733][ T36] audit: type=1400 audit(1615783019.479:477): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6449 comm="syz-executor.3" 04:36:59 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) socket(0x1f, 0x6, 0x8) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="a697c675ba31ec10e82196fd539c2512f067e28258f31e3f065aef80fc33b029e22a246c7a5b4101ebcb41f9dcead15ba950b0040c15fee49199e87c92b3510a09316685dbac11844c1491bd043590dc49b9e0a682e1280f0153f5c6fef239dbffa1ab80dd81a5cb8f9cb045862e3969f374446f5fe783649970eaeb7b53d3fcf6", 0x81}, {&(0x7f0000000300)="e0b5d7179f322345c6dc52753d36270dea3561b3e75b301f6244d6914acdcde2705592c116b3e1be7fbcbb0a0f8951742ccd0e3213a91f1817df9db89eab2184b024b6cc4b88568a960bcef5100f8aa1c8f46ba6e0a584aaae657083c330f3d6af7a126f0881c60968ef316ff919b4c2401eeecd59df1186e33e322bd46a544f3109c823711254fb5c24d76e7e246ce9f6fd1a49373763b3b864e8a30e40e21b", 0xa0}, {&(0x7f00000003c0)="49782cdf0c4cfee0a38e414d26169c195bab324c7de92b13abb8315438b4088508f1f0071dd96b233c1478097f12db3c95866ff2d04e246509eb8056444c83e1a9dc14740e0664dd8303b0bf04ceebaec655dfcf7c395e46809f08f5ff703bd45e9ffb781282f1748e11135b8de7f39bca40d716eda5", 0x76}], 0x3, 0xa, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:36:59 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x6040000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:59 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:59 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1699.699952][ T36] audit: type=1400 audit(1615783019.489:478): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=6449 comm="syz-executor.3" 04:36:59 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:36:59 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae"], 0x2b) 04:36:59 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7065400d70726f66698265202f"], 0x2b) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:36:59 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) socket(0x1f, 0x6, 0x8) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:36:59 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x8000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1699.753679][ T6475] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1699.768729][ T36] audit: type=1400 audit(1615783019.599:479): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6463 comm="syz-executor.3" 04:36:59 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x2, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:59 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:36:59 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:59 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b5937c84d0b26b29559e4959a769"], 0x2b) 04:36:59 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x25, &(0x7f00000000c0)={0x3e, 0xc96e, 0x400}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:36:59 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x10000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1699.883103][ T6494] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:36:59 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48"], 0x2b) 04:36:59 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x18000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:59 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:36:59 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x4, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1699.958158][ T6507] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:36:59 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:36:59 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48"], 0x2b) 04:36:59 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1e000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:36:59 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e0000}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:36:59 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) [ 1700.052308][ T6521] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:00 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:37:00 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48"], 0x2b) 04:37:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x34, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:00 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1e178000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:00 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:37:00 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:00 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b5937c84d0"], 0x2b) [ 1700.167174][ T6536] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:00 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:37:00 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x20000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:00 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48"], 0x2b) [ 1700.266586][ T6554] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:00 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:00 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:00 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x20fff000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:00 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:37:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xc10, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:00 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48"], 0x2b) 04:37:00 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x24000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:00 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:37:00 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) [ 1700.986891][ T6566] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:00 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:00 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2a000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:01 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48"], 0x2b) 04:37:01 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@profile={'permprofile ', '/proc/thread-self/attr/current\x00'}, 0x2b) 04:37:01 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:01 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x30000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1701.108126][ T6586] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:01 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x100c, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:01 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:01 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 04:37:01 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b5"], 0x2b) [ 1701.183490][ T6597] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:01 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:01 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x36000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:01 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 04:37:01 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab"], 0x2b) 04:37:01 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:01 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="63090000009e1e27eb2868617420300000000000000000000000a71ec9c7e8fd9aa48da420578e30c2bc6334c04e3b1f"], 0x3c) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) [ 1701.292489][ T6615] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:01 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab"], 0x2b) 04:37:01 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) [ 1701.371882][ T6626] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:01 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x3400, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:01 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3c000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:01 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0xfa, 0x9}, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:01 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6344db33f9294dce6e6765"], 0x3c) 04:37:01 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab"], 0x2b) 04:37:01 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:01 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x7fff, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000140)=0x7f, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001180)=""/4065, 0xfe1}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)={0x80, 0x1, 0x9, 0x0, 0x5, 0x6, 0x21, 0x6, 0x9, 0x3, 0x9, 0x4, 0x0, 0x18f, 0x9, 0x1, 0x81, 0x80, 0x40, [], 0xff, 0xfffffffffffffffa}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065400d70726f665ce49d562fe434333115d46b0000fc11cf7eea620c13af77c59c917418"], 0x2b) 04:37:02 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x42000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e02"], 0x2b) 04:37:02 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) [ 1702.099255][ T6642] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:02 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat 0'], 0x20000136) 04:37:02 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x34}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:02 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x7ec0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e02"], 0x2b) 04:37:02 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x91000100]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e02"], 0x2b) [ 1702.202855][ T6658] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:02 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='permhat%0'], 0xb6) 04:37:02 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:02 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xfeffffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:02 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3400}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:02 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:02 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xc07e, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e02"], 0x2b) [ 1702.243421][ T6663] AppArmor: change_hat: Invalid input '0' [ 1702.335460][ T6678] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:02 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:02 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xff000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:02 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e02"], 0x2b) 04:37:02 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x7ec0}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:02 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xffff8000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:02 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0xc4) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) [ 1702.402830][ T6689] AppArmor: change_hat: Invalid input '#' [ 1702.445607][ T6699] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 04:37:02 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x40000, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:02 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e02"], 0x2b) 04:37:02 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0xc4) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:02 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xffffc000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:02 executing program 3: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:02 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xfeffffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:02 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xc07e}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1702.486830][ T6702] AppArmor: change_hat: Invalid input '#' 04:37:02 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0xc4) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:02 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:02 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xfffffffe]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:02 executing program 3: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) [ 1702.574429][ T6717] AppArmor: change_hat: Invalid input '#' [ 1702.692922][ T6738] FAULT_INJECTION: forcing a failure. [ 1702.692922][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.713630][ T6738] CPU: 0 PID: 6738 Comm: syz-executor.2 Not tainted 5.12.0-rc2-syzkaller #0 [ 1702.722305][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.732349][ T6738] Call Trace: [ 1702.735618][ T6738] dump_stack+0x137/0x19d [ 1702.739945][ T6738] should_fail+0x23c/0x250 [ 1702.744360][ T6738] __should_failslab+0x81/0x90 [ 1702.749112][ T6738] ? proc_pid_attr_write+0x133/0x200 [ 1702.754433][ T6738] should_failslab+0x5/0x20 [ 1702.758960][ T6738] __kmalloc_track_caller+0x64/0x380 [ 1702.764239][ T6738] memdup_user+0x22/0xb0 [ 1702.768480][ T6738] proc_pid_attr_write+0x133/0x200 [ 1702.773596][ T6738] ? proc_pid_attr_read+0x190/0x190 [ 1702.778831][ T6738] vfs_write+0x223/0x7e0 [ 1702.783189][ T6738] ? __fget_light+0x219/0x260 [ 1702.787911][ T6738] ksys_write+0xce/0x180 [ 1702.792129][ T6738] __x64_sys_write+0x3e/0x50 [ 1702.796836][ T6738] do_syscall_64+0x39/0x80 [ 1702.801227][ T6738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.807099][ T6738] RIP: 0033:0x465f69 [ 1702.810973][ T6738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1702.830556][ T6738] RSP: 002b:00007f1bf430b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1702.838960][ T6738] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1702.846905][ T6738] RDX: 000000000000002b RSI: 0000000020000280 RDI: 0000000000000003 [ 1702.854851][ T6738] RBP: 00007f1bf430b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1702.862797][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.870755][ T6738] R13: 00007ffecb04890f R14: 00007f1bf430b300 R15: 0000000000022000 04:37:03 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xca9a3b, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:03 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:03 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:03 executing program 3: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:03 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x40000}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:03 executing program 2 (fault-call:1 fault-nth:1): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) [ 1703.409668][ T6752] FAULT_INJECTION: forcing a failure. [ 1703.409668][ T6752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1703.425810][ T6755] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 1703.442245][ T6752] CPU: 0 PID: 6752 Comm: syz-executor.2 Not tainted 5.12.0-rc2-syzkaller #0 04:37:03 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:03 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:03 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1703.450933][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1703.460984][ T6752] Call Trace: [ 1703.464256][ T6752] dump_stack+0x137/0x19d [ 1703.468639][ T6752] should_fail+0x23c/0x250 [ 1703.473056][ T6752] should_fail_usercopy+0x16/0x20 [ 1703.478118][ T6752] _copy_from_user+0x1c/0xd0 [ 1703.482886][ T6752] memdup_user+0x5b/0xb0 [ 1703.487248][ T6752] proc_pid_attr_write+0x133/0x200 [ 1703.492438][ T6752] ? proc_pid_attr_read+0x190/0x190 [ 1703.497614][ T6752] vfs_write+0x223/0x7e0 [ 1703.501844][ T6752] ? __fget_light+0x219/0x260 04:37:03 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x1000000, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1703.506526][ T6752] ksys_write+0xce/0x180 [ 1703.510769][ T6752] __x64_sys_write+0x3e/0x50 [ 1703.515350][ T6752] do_syscall_64+0x39/0x80 [ 1703.519905][ T6752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.525778][ T6752] RIP: 0033:0x465f69 [ 1703.529645][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1703.549226][ T6752] RSP: 002b:00007f1bf430b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 04:37:03 executing program 2 (fault-call:1 fault-nth:2): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) [ 1703.557688][ T6752] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1703.565781][ T6752] RDX: 000000000000002b RSI: 0000000020000280 RDI: 0000000000000003 [ 1703.573788][ T6752] RBP: 00007f1bf430b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.581768][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.589771][ T6752] R13: 00007ffecb04890f R14: 00007f1bf430b300 R15: 0000000000022000 04:37:03 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:03 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x4]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:03 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x100000}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1703.670083][ T6774] FAULT_INJECTION: forcing a failure. [ 1703.670083][ T6774] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.688389][ T6774] CPU: 1 PID: 6774 Comm: syz-executor.2 Not tainted 5.12.0-rc2-syzkaller #0 [ 1703.697072][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1703.707112][ T6774] Call Trace: [ 1703.710383][ T6774] dump_stack+0x137/0x19d [ 1703.714713][ T6774] should_fail+0x23c/0x250 04:37:03 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x5]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1703.719125][ T6774] __should_failslab+0x81/0x90 [ 1703.723902][ T6774] ? apparmor_setprocattr+0xbc/0x720 [ 1703.729261][ T6774] should_failslab+0x5/0x20 [ 1703.733819][ T6774] __kmalloc+0x66/0x380 [ 1703.737991][ T6774] apparmor_setprocattr+0xbc/0x720 [ 1703.743448][ T6774] security_setprocattr+0xab/0xd0 [ 1703.748571][ T6774] proc_pid_attr_write+0x1bc/0x200 [ 1703.753700][ T6774] ? proc_pid_attr_read+0x190/0x190 [ 1703.758923][ T6774] vfs_write+0x223/0x7e0 [ 1703.763188][ T6774] ? __fget_light+0x219/0x260 04:37:03 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x8]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:03 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xca9a3b}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:03 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x2000000, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1703.767861][ T6774] ksys_write+0xce/0x180 [ 1703.772105][ T6774] __x64_sys_write+0x3e/0x50 [ 1703.776706][ T6774] do_syscall_64+0x39/0x80 [ 1703.781142][ T6774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.787103][ T6774] RIP: 0033:0x465f69 [ 1703.790989][ T6774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1703.810608][ T6774] RSP: 002b:00007f1bf430b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 04:37:03 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) 04:37:03 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:03 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x10]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1703.819030][ T6774] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1703.826990][ T6774] RDX: 000000000000002b RSI: 0000000020000280 RDI: 0000000000000003 [ 1703.834959][ T6774] RBP: 00007f1bf430b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.842985][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.850948][ T6774] R13: 00007ffecb04890f R14: 00007f1bf430b300 R15: 0000000000022000 04:37:03 executing program 2 (fault-call:1 fault-nth:3): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:03 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:03 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xc100000, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:03 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x18]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:03 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) [ 1703.945641][ T6810] FAULT_INJECTION: forcing a failure. [ 1703.945641][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.967594][ T6810] CPU: 1 PID: 6810 Comm: syz-executor.2 Not tainted 5.12.0-rc2-syzkaller #0 [ 1703.976278][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1703.986322][ T6810] Call Trace: [ 1703.989668][ T6810] dump_stack+0x137/0x19d 04:37:03 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, 0x0, 0x0) 04:37:03 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1e]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1703.993989][ T6810] should_fail+0x23c/0x250 [ 1703.998418][ T6810] ? audit_log_start+0x37c/0x6d0 [ 1704.003357][ T6810] __should_failslab+0x81/0x90 [ 1704.008119][ T6810] should_failslab+0x5/0x20 [ 1704.012680][ T6810] kmem_cache_alloc+0x46/0x320 [ 1704.017443][ T6810] ? __rcu_read_unlock+0x5c/0x250 [ 1704.022462][ T6810] audit_log_start+0x37c/0x6d0 [ 1704.027234][ T6810] ? get_page_from_freelist+0x366/0x630 [ 1704.032788][ T6810] ? aa_audit_msg+0x50/0x50 [ 1704.037336][ T6810] common_lsm_audit+0x61/0xeb0 [ 1704.042099][ T6810] ? __kmalloc+0x1e5/0x380 [ 1704.046530][ T6810] aa_audit_msg+0x40/0x50 [ 1704.050856][ T6810] apparmor_setprocattr+0x40b/0x720 [ 1704.056056][ T6810] security_setprocattr+0xab/0xd0 [ 1704.061076][ T6810] proc_pid_attr_write+0x1bc/0x200 [ 1704.066242][ T6810] ? proc_pid_attr_read+0x190/0x190 [ 1704.071491][ T6810] vfs_write+0x223/0x7e0 [ 1704.075713][ T6810] ? __fget_light+0x219/0x260 [ 1704.080367][ T6810] ksys_write+0xce/0x180 [ 1704.084590][ T6810] __x64_sys_write+0x3e/0x50 [ 1704.089216][ T6810] do_syscall_64+0x39/0x80 [ 1704.093609][ T6810] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1704.099480][ T6810] RIP: 0033:0x465f69 [ 1704.103387][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1704.122996][ T6810] RSP: 002b:00007f1bf430b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1704.131384][ T6810] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1704.139384][ T6810] RDX: 000000000000002b RSI: 0000000020000280 RDI: 0000000000000003 [ 1704.147434][ T6810] RBP: 00007f1bf430b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1704.155397][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.163349][ T6810] R13: 00007ffecb04890f R14: 00007f1bf430b300 R15: 0000000000022000 [ 1704.178261][ T6810] audit_log_lost: 25 callbacks suppressed [ 1704.178271][ T6810] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 1704.191881][ T6810] audit: out of memory in audit_log_start 04:37:04 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xf0ff7f}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:04 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x34000000, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:04 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:04 executing program 2 (fault-call:1 fault-nth:4): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, 0x0, 0x0) 04:37:04 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x24]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1704.717809][ T6833] FAULT_INJECTION: forcing a failure. [ 1704.717809][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.731840][ T6833] CPU: 1 PID: 6833 Comm: syz-executor.2 Not tainted 5.12.0-rc2-syzkaller #0 [ 1704.740523][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1704.750579][ T6833] Call Trace: [ 1704.753852][ T6833] dump_stack+0x137/0x19d [ 1704.758192][ T6833] should_fail+0x23c/0x250 [ 1704.762616][ T6833] __should_failslab+0x81/0x90 [ 1704.767387][ T6833] should_failslab+0x5/0x20 [ 1704.771942][ T6833] kmem_cache_alloc_node+0x56/0x310 [ 1704.777181][ T6833] ? __alloc_skb+0xed/0x420 [ 1704.781676][ T6833] __alloc_skb+0xed/0x420 [ 1704.785982][ T6833] audit_log_start+0x398/0x6d0 [ 1704.790805][ T6833] ? get_page_from_freelist+0x366/0x630 [ 1704.796418][ T6833] ? aa_audit_msg+0x50/0x50 [ 1704.800896][ T6833] common_lsm_audit+0x61/0xeb0 [ 1704.805638][ T6833] ? __kmalloc+0x1e5/0x380 [ 1704.810028][ T6833] aa_audit_msg+0x40/0x50 04:37:04 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1704.814334][ T6833] apparmor_setprocattr+0x40b/0x720 [ 1704.819586][ T6833] security_setprocattr+0xab/0xd0 [ 1704.824640][ T6833] proc_pid_attr_write+0x1bc/0x200 [ 1704.829769][ T6833] ? proc_pid_attr_read+0x190/0x190 [ 1704.834969][ T6833] vfs_write+0x223/0x7e0 [ 1704.839206][ T6833] ? __fget_light+0x219/0x260 [ 1704.843877][ T6833] ksys_write+0xce/0x180 [ 1704.848143][ T6833] __x64_sys_write+0x3e/0x50 [ 1704.852730][ T6833] do_syscall_64+0x39/0x80 [ 1704.857137][ T6833] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1704.863017][ T6833] RIP: 0033:0x465f69 [ 1704.866888][ T6833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1704.886472][ T6833] RSP: 002b:00007f1bf430b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1704.894859][ T6833] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1704.902820][ T6833] RDX: 000000000000002b RSI: 0000000020000280 RDI: 0000000000000003 [ 1704.910765][ T6833] RBP: 00007f1bf430b1d0 R08: 0000000000000000 R09: 0000000000000000 04:37:04 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x2000000}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:04 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, 0x0, 0x0) 04:37:04 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2a]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1704.918811][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.926789][ T6833] R13: 00007ffecb04890f R14: 00007f1bf430b300 R15: 0000000000022000 [ 1704.958032][ T6833] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 04:37:04 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x3b9aca00, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:04 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x34000000}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1704.982428][ T6833] audit: out of memory in audit_log_start 04:37:04 executing program 2 (fault-call:1 fault-nth:5): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:04 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x30]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:04 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x3c) 04:37:04 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, 0x0, 0x0) 04:37:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x3c) 04:37:05 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x36]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1705.103145][ T6870] FAULT_INJECTION: forcing a failure. [ 1705.103145][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.128852][ T6870] CPU: 0 PID: 6870 Comm: syz-executor.2 Not tainted 5.12.0-rc2-syzkaller #0 [ 1705.137607][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1705.147650][ T6870] Call Trace: 04:37:05 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, 0x0, 0x0) 04:37:05 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, 0x0, 0x0) [ 1705.150926][ T6870] dump_stack+0x137/0x19d [ 1705.155248][ T6870] should_fail+0x23c/0x250 [ 1705.159655][ T6870] __should_failslab+0x81/0x90 [ 1705.164428][ T6870] should_failslab+0x5/0x20 [ 1705.168955][ T6870] kmem_cache_alloc_node_trace+0x5b/0x310 [ 1705.174684][ T6870] ? __kmalloc_node_track_caller+0x30/0x40 [ 1705.180509][ T6870] __kmalloc_node_track_caller+0x30/0x40 [ 1705.186140][ T6870] ? audit_log_start+0x398/0x6d0 [ 1705.191160][ T6870] __alloc_skb+0x187/0x420 [ 1705.195574][ T6870] audit_log_start+0x398/0x6d0 04:37:05 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3c]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:05 executing program 0: connect$ax25(0xffffffffffffffff, 0x0, 0x0) [ 1705.200331][ T6870] ? get_page_from_freelist+0x366/0x630 [ 1705.205872][ T6870] ? aa_audit_msg+0x50/0x50 [ 1705.210373][ T6870] common_lsm_audit+0x61/0xeb0 [ 1705.215231][ T6870] ? __kmalloc+0x1e5/0x380 [ 1705.219640][ T6870] aa_audit_msg+0x40/0x50 [ 1705.223966][ T6870] apparmor_setprocattr+0x40b/0x720 [ 1705.229233][ T6870] security_setprocattr+0xab/0xd0 [ 1705.234256][ T6870] proc_pid_attr_write+0x1bc/0x200 [ 1705.239375][ T6870] ? proc_pid_attr_read+0x190/0x190 [ 1705.244576][ T6870] vfs_write+0x223/0x7e0 [ 1705.248970][ T6870] ? __fget_light+0x219/0x260 [ 1705.253649][ T6870] ksys_write+0xce/0x180 [ 1705.257894][ T6870] __x64_sys_write+0x3e/0x50 [ 1705.262649][ T6870] do_syscall_64+0x39/0x80 [ 1705.267142][ T6870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1705.273095][ T6870] RIP: 0033:0x465f69 [ 1705.276979][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.296581][ T6870] RSP: 002b:00007f1bf430b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1705.304996][ T6870] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1705.312960][ T6870] RDX: 000000000000002b RSI: 0000000020000280 RDI: 0000000000000003 [ 1705.321018][ T6870] RBP: 00007f1bf430b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.329032][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1705.336988][ T6870] R13: 00007ffecb04890f R14: 00007f1bf430b300 R15: 0000000000022000 [ 1705.346259][ T6870] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 1705.356114][ T6870] audit: out of memory in audit_log_start 04:37:05 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xc07e0000, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:05 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3b9aca00}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:05 executing program 0: connect$ax25(0xffffffffffffffff, 0x0, 0x0) 04:37:05 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x42]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x3c) 04:37:05 executing program 2 (fault-call:1 fault-nth:6): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:05 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x60]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) 04:37:05 executing program 0: connect$ax25(0xffffffffffffffff, 0x0, 0x0) 04:37:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) [ 1705.946164][ T36] audit: type=1400 audit(1615783025.819:505): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6896 comm="syz-executor.2" [ 1705.973850][ T6902] FAULT_INJECTION: forcing a failure. [ 1705.973850][ T6902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1705.998202][ T6902] CPU: 1 PID: 6902 Comm: syz-executor.2 Not tainted 5.12.0-rc2-syzkaller #0 [ 1706.006950][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1706.017054][ T6902] Call Trace: [ 1706.020436][ T6902] dump_stack+0x137/0x19d [ 1706.024761][ T6902] should_fail+0x23c/0x250 [ 1706.029171][ T6902] should_fail_usercopy+0x16/0x20 [ 1706.034200][ T6902] _copy_to_user+0x1c/0x90 [ 1706.038665][ T6902] simple_read_from_buffer+0xab/0x120 04:37:05 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xffffff7f, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) 04:37:05 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x3c) [ 1706.044060][ T6902] proc_fail_nth_read+0xf6/0x140 [ 1706.049005][ T6902] ? rw_verify_area+0x136/0x250 [ 1706.053857][ T6902] ? proc_fault_inject_write+0x200/0x200 [ 1706.059575][ T6902] vfs_read+0x154/0x5d0 [ 1706.063736][ T6902] ? __fget_light+0x219/0x260 [ 1706.068417][ T6902] ksys_read+0xce/0x180 [ 1706.072575][ T6902] __x64_sys_read+0x3e/0x50 [ 1706.077081][ T6902] do_syscall_64+0x39/0x80 [ 1706.081492][ T6902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.087397][ T6902] RIP: 0033:0x4191ec [ 1706.091283][ T6902] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1706.111064][ T6902] RSP: 002b:00007f1bf430b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1706.119573][ T6902] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191ec [ 1706.127533][ T6902] RDX: 000000000000000f RSI: 00007f1bf430b1e0 RDI: 0000000000000004 [ 1706.135496][ T6902] RBP: 00007f1bf430b1d0 R08: 0000000000000000 R09: 0000000000000000 04:37:06 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x7ffff000}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:06 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0x34}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:06 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x3c) 04:37:06 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x204]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:06 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:06 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) connect$ax25(r0, 0x0, 0x0) [ 1706.143534][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.151593][ T6902] R13: 00007ffecb04890f R14: 00007f1bf430b300 R15: 0000000000022000 04:37:06 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x3c) 04:37:06 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) connect$ax25(r0, 0x0, 0x0) 04:37:06 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0x200057cc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:06 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='change'], 0x3c) [ 1706.245584][ T36] audit: type=1400 audit(1615783026.119:506): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6930 comm="syz-executor.2" 04:37:06 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2565400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:06 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x402]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1706.340053][ T36] audit: type=1400 audit(1615783026.209:507): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6945 comm="syz-executor.2" 04:37:06 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x406]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:06 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xc07e0000}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:06 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) connect$ax25(r0, 0x0, 0x0) 04:37:06 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='change'], 0x3c) 04:37:06 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7022400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:06 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0x7ffff000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:07 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7025400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:07 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='change'], 0x3c) 04:37:07 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) [ 1707.108719][ T36] audit: type=1400 audit(1615783026.979:508): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6960 comm="syz-executor.2" 04:37:07 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) 04:37:07 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat'], 0x3c) 04:37:07 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x500]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:07 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065080d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:07 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xffffff7f}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:07 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x604]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:07 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065405d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:07 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) 04:37:07 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x28}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:07 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1800]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:07 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat'], 0x3c) 04:37:07 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d25726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:07 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x3c) 04:37:07 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70226f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:07 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70256f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:07 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat'], 0x3c) 04:37:08 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:08 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1e00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:08 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xc100000, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:08 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70722266698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:08 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat '], 0x3c) 04:37:08 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70722566698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:08 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:08 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1002}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:08 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f22698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:08 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat '], 0x3c) 04:37:08 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2400]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:08 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f25698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:08 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x2, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:08 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat '], 0x3c) 04:37:08 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2a00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:08 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66228265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:08 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70722266698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:09 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:09 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1034}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:09 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66258265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:09 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x18]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:09 executing program 3: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x40000}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:09 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:09 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3600]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1709.744632][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 1709.744643][ T36] audit: type=1400 audit(1615783029.619:521): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7072 comm="syz-executor.2" 04:37:09 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x4, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:09 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698222202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:09 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:09 executing program 3: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x40000}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:09 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3c00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:09 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x4000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1709.922144][ T36] audit: type=1400 audit(1615783029.789:522): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7094 comm="syz-executor.2" 04:37:10 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x20006800}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:10 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698225202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:10 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:10 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x4200]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:10 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265252ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:10 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265292ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) [ 1710.606322][ T36] audit: type=1400 audit(1615783030.479:523): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7112 comm="syz-executor.2" 04:37:10 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x10, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:10 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:10 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x6000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:10 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff823a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:10 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x7fffeff4}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:10 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) [ 1710.799118][ T36] audit: type=1400 audit(1615783030.669:524): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7132 comm="syz-executor.2" [ 1710.806684][ T7141] FAULT_INJECTION: forcing a failure. [ 1710.806684][ T7141] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.829953][ T7141] CPU: 0 PID: 7141 Comm: syz-executor.3 Not tainted 5.12.0-rc2-syzkaller #0 [ 1710.838631][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 04:37:10 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff82ba837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:10 executing program 0: syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:10 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1710.848680][ T7141] Call Trace: [ 1710.851954][ T7141] dump_stack+0x137/0x19d [ 1710.856287][ T7141] should_fail+0x23c/0x250 [ 1710.860700][ T7141] __should_failslab+0x81/0x90 [ 1710.865454][ T7141] ? proc_pid_attr_write+0x133/0x200 [ 1710.870800][ T7141] should_failslab+0x5/0x20 [ 1710.875297][ T7141] __kmalloc_track_caller+0x64/0x380 [ 1710.880619][ T7141] memdup_user+0x22/0xb0 [ 1710.884972][ T7141] proc_pid_attr_write+0x133/0x200 [ 1710.890082][ T7141] ? proc_pid_attr_read+0x190/0x190 [ 1710.895277][ T7141] vfs_write+0x223/0x7e0 04:37:10 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:10 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1710.899650][ T7141] ? __fget_light+0x219/0x260 [ 1710.904316][ T7141] ksys_write+0xce/0x180 [ 1710.908563][ T7141] __x64_sys_write+0x3e/0x50 [ 1710.913146][ T7141] do_syscall_64+0x39/0x80 [ 1710.917554][ T7141] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.923467][ T7141] RIP: 0033:0x465f69 [ 1710.927361][ T7141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:37:10 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff82da837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) [ 1710.947020][ T7141] RSP: 002b:00007f9e7fad7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1710.955421][ T7141] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1710.963389][ T7141] RDX: 000000000000003c RSI: 0000000020000080 RDI: 0000000000000003 [ 1710.971427][ T7141] RBP: 00007f9e7fad71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1710.979462][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.987425][ T7141] R13: 00007ffcfcdd35ef R14: 00007f9e7fad7300 R15: 0000000000022000 04:37:10 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x34, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:10 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:10 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xff00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:10 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:10 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x8}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:10 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837093391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:10 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x10091]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1711.022738][ T36] audit: type=1400 audit(1615783030.889:525): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7154 comm="syz-executor.2" 04:37:10 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837342391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) [ 1711.083327][ T36] audit: type=1400 audit(1615783030.949:526): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7166 comm="syz-executor.2" [ 1711.111143][ T7170] FAULT_INJECTION: forcing a failure. [ 1711.111143][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1711.144883][ T36] audit: type=1400 audit(1615783031.009:527): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7174 comm="syz-executor.2" [ 1711.146674][ T7170] CPU: 1 PID: 7170 Comm: syz-executor.3 Not tainted 5.12.0-rc2-syzkaller #0 [ 1711.169944][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.180000][ T7170] Call Trace: [ 1711.183263][ T7170] dump_stack+0x137/0x19d [ 1711.187651][ T7170] should_fail+0x23c/0x250 [ 1711.192065][ T7170] should_fail_usercopy+0x16/0x20 [ 1711.197069][ T7170] _copy_from_user+0x1c/0xd0 [ 1711.201633][ T7170] memdup_user+0x5b/0xb0 [ 1711.205852][ T7170] proc_pid_attr_write+0x133/0x200 [ 1711.210943][ T7170] ? proc_pid_attr_read+0x190/0x190 [ 1711.216181][ T7170] vfs_write+0x223/0x7e0 [ 1711.220442][ T7170] ? __fget_light+0x219/0x260 [ 1711.225115][ T7170] ksys_write+0xce/0x180 [ 1711.229336][ T7170] __x64_sys_write+0x3e/0x50 [ 1711.233904][ T7170] do_syscall_64+0x39/0x80 [ 1711.238355][ T7170] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1711.244225][ T7170] RIP: 0033:0x465f69 [ 1711.248094][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1711.267694][ T7170] RSP: 002b:00007f9e7fad7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1711.276078][ T7170] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1711.284024][ T7170] RDX: 000000000000003c RSI: 0000000020000080 RDI: 0000000000000003 04:37:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) 04:37:11 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837342b91482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:11 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x3400, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:11 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x40000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:11 executing program 3 (fault-call:1 fault-nth:2): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) [ 1711.292050][ T7170] RBP: 00007f9e7fad71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1711.299999][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.307945][ T7170] R13: 00007ffcfcdd35ef R14: 00007f9e7fad7300 R15: 0000000000022000 04:37:11 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) [ 1711.366272][ T7190] AppArmor: change_hat: Invalid input '#' [ 1711.366287][ T7190] FAULT_INJECTION: forcing a failure. [ 1711.366287][ T7190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1711.387075][ T7190] CPU: 1 PID: 7190 Comm: syz-executor.3 Not tainted 5.12.0-rc2-syzkaller #0 [ 1711.390320][ T36] audit: type=1400 audit(1615783031.259:528): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7184 comm="syz-executor.2" [ 1711.395886][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.395897][ T7190] Call Trace: [ 1711.395904][ T7190] dump_stack+0x137/0x19d [ 1711.395972][ T7190] should_fail+0x23c/0x250 [ 1711.395987][ T7190] should_fail_usercopy+0x16/0x20 [ 1711.396002][ T7190] _copy_to_user+0x1c/0x90 [ 1711.443800][ T7190] simple_read_from_buffer+0xab/0x120 [ 1711.449172][ T7190] proc_fail_nth_read+0xf6/0x140 [ 1711.454113][ T7190] ? rw_verify_area+0x136/0x250 [ 1711.458998][ T7190] ? proc_fault_inject_write+0x200/0x200 [ 1711.464612][ T7190] vfs_read+0x154/0x5d0 [ 1711.468744][ T7190] ? __fget_light+0x219/0x260 [ 1711.473398][ T7190] ksys_read+0xce/0x180 [ 1711.477534][ T7190] __x64_sys_read+0x3e/0x50 [ 1711.482014][ T7190] do_syscall_64+0x39/0x80 [ 1711.486401][ T7190] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1711.492271][ T7190] RIP: 0033:0x4191ec [ 1711.496140][ T7190] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 04:37:11 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x80000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:11 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837342d91482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:11 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x7ec0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:11 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) [ 1711.515824][ T7190] RSP: 002b:00007f9e7fad7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1711.524210][ T7190] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191ec [ 1711.532230][ T7190] RDX: 000000000000000f RSI: 00007f9e7fad71e0 RDI: 0000000000000004 [ 1711.540214][ T7190] RBP: 00007f9e7fad71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1711.548160][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.556159][ T7190] R13: 00007ffcfcdd35ef R14: 00007f9e7fad7300 R15: 0000000000022000 04:37:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) 04:37:11 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x91000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:11 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='ch%ngehat #'], 0x3c) 04:37:11 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x4}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:11 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343091482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) [ 1711.614617][ T7204] AppArmor: change_hat: Invalid input '#' [ 1711.630400][ T36] audit: type=1400 audit(1615783031.499:529): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7200 comm="syz-executor.2" 04:37:11 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xc07e, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:11 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a8373433915d2a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:11 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='cha%gehat #'], 0x3c) [ 1711.706822][ T36] audit: type=1400 audit(1615783031.559:530): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7211 comm="syz-executor.3" 04:37:11 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changeh%t #'], 0x3c) 04:37:11 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x100900]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) 04:37:11 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80226dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:11 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x400000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:11 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80256dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:11 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x40000, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:12 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x34}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:12 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changeha% #'], 0x3c) 04:37:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) 04:37:12 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a806325c182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:12 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x600000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:12 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x100000, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:12 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat%#'], 0x3c) 04:37:12 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x80171e]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:12 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae5dab2e0277"], 0x2b) 04:37:12 executing program 0 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:12 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab220277"], 0x2b) 04:37:12 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x80ffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1712.655397][ T7275] FAULT_INJECTION: forcing a failure. [ 1712.655397][ T7275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1712.671453][ T7275] CPU: 0 PID: 7275 Comm: syz-executor.0 Not tainted 5.12.0-rc2-syzkaller #0 [ 1712.680195][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.690243][ T7275] Call Trace: [ 1712.693512][ T7275] dump_stack+0x137/0x19d [ 1712.697845][ T7275] should_fail+0x23c/0x250 [ 1712.702245][ T7275] should_fail_usercopy+0x16/0x20 [ 1712.707257][ T7275] _copy_from_user+0x1c/0xd0 [ 1712.711847][ T7275] __x64_sys_io_uring_setup+0x4b/0x120 [ 1712.717301][ T7275] ? fput+0x2d/0x130 [ 1712.721232][ T7275] ? ksys_write+0x157/0x180 [ 1712.725786][ T7275] ? fpregs_assert_state_consistent+0x7d/0x90 [ 1712.731986][ T7275] ? exit_to_user_mode_prepare+0x71/0x1b0 [ 1712.737686][ T7275] do_syscall_64+0x39/0x80 [ 1712.742096][ T7275] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.747965][ T7275] RIP: 0033:0x465f69 [ 1712.751878][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.771575][ T7275] RSP: 002b:00007f7ba1e11108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.779962][ T7275] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1712.787911][ T7275] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000000000 [ 1712.795857][ T7275] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 04:37:12 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xc10}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:12 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xc0ffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:12 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat 0'], 0x3c) 04:37:12 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab250277"], 0x2b) 04:37:12 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xf0ff20]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1712.803805][ T7275] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 1712.811807][ T7275] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffe000 04:37:13 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xca9a3b, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:13 executing program 0 (fault-call:0 fault-nth:1): syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:13 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x200000bc) 04:37:13 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0377"], 0x2b) 04:37:13 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:13 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1712.873876][ T7293] AppArmor: change_hat: Invalid input '0' [ 1713.436800][ T7305] AppArmor: change_hat: Invalid input '#' [ 1713.449022][ T7310] FAULT_INJECTION: forcing a failure. [ 1713.449022][ T7310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1713.469703][ T7310] CPU: 0 PID: 7310 Comm: syz-executor.0 Not tainted 5.12.0-rc2-syzkaller #0 [ 1713.478383][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1713.488422][ T7310] Call Trace: [ 1713.491733][ T7310] dump_stack+0x137/0x19d [ 1713.496043][ T7310] should_fail+0x23c/0x250 [ 1713.500435][ T7310] should_fail_usercopy+0x16/0x20 [ 1713.505635][ T7310] _copy_to_user+0x1c/0x90 [ 1713.510039][ T7310] simple_read_from_buffer+0xab/0x120 [ 1713.515393][ T7310] proc_fail_nth_read+0xf6/0x140 [ 1713.520314][ T7310] ? rw_verify_area+0x136/0x250 [ 1713.525218][ T7310] ? proc_fault_inject_write+0x200/0x200 [ 1713.530910][ T7310] vfs_read+0x154/0x5d0 [ 1713.535047][ T7310] ? __fget_light+0x219/0x260 [ 1713.539776][ T7310] ksys_read+0xce/0x180 [ 1713.544033][ T7310] __x64_sys_read+0x3e/0x50 [ 1713.548512][ T7310] do_syscall_64+0x39/0x80 [ 1713.552902][ T7310] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.558802][ T7310] RIP: 0033:0x4191ec [ 1713.562673][ T7310] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 04:37:13 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0877"], 0x2b) [ 1713.582256][ T7310] RSP: 002b:00007f7ba1e11170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1713.590687][ T7310] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000004191ec [ 1713.598647][ T7310] RDX: 000000000000000f RSI: 00007f7ba1e111e0 RDI: 0000000000000003 [ 1713.606594][ T7310] RBP: 00007f7ba1e111d0 R08: 0000000000000000 R09: 0000000010000000 [ 1713.614542][ T7310] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 1713.622506][ T7310] R13: 00007ffc61212eff R14: 00007f7ba1e11300 R15: 0000000000022000 04:37:13 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x100c}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:13 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x7ffff000) 04:37:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:13 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2040000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:13 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e020a"], 0x2b) 04:37:14 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xf0ff7f, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:14 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @none}, 0x8) 04:37:14 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0xffffffffffffffff) 04:37:14 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0264"], 0x2b) 04:37:14 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x4000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:14 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xca8b, 0x20, 0x0, 0x3, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x6f2, &(0x7f0000000100)={0x0, 0xd4b4, 0x10, 0x3, 0x131}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x800, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008980}, 0x20000001) 04:37:14 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x5000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:14 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x3400}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:14 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'stack ', '/proc/thread-self/attr/current\x00'}, 0x25) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) 04:37:14 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e02ff"], 0x2b) 04:37:14 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x6040000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:14 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) accept4$tipc(r1, &(0x7f00000007c0), &(0x7f0000000800)=0x10, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x430, 0x3f3, 0x4, 0x70bd2c, 0x25dfdbfb, {0x895fed8c74011545, 0x2, 0x1e, [0x0, 0x7, 0x3, 0x8, 0x4, 0xffffffff, 0x8, 0x81, 0x7fffffff, 0x6, 0x3, 0x400, 0x72e, 0x4, 0x7, 0x1, 0x1, 0x6e, 0x7ff, 0x0, 0x7, 0x5, 0x8, 0x8, 0x6, 0x3555, 0x1, 0xdb, 0xb013, 0x6, 0x4, 0x8, 0x80, 0x2205, 0x3ff, 0x8, 0x2, 0x3, 0x9, 0x3342, 0x100, 0x2, 0x0, 0x3, 0x8, 0x8, 0x8, 0x1f, 0xa2c, 0x8, 0x9, 0x6, 0x3, 0x2, 0x2, 0x1, 0x4, 0x9, 0x6, 0x671, 0xffff, 0x7, 0x1ff, 0x7], [0x9, 0x9, 0x3, 0xffffffff, 0x0, 0x8, 0x6, 0xe8, 0x4, 0x5327, 0x71d2b6d, 0x7, 0x7, 0x3, 0x1f, 0x85, 0x3ff, 0x8, 0x2f6db7e0, 0x4, 0x6, 0x80000001, 0x2, 0x1, 0x4f, 0x1ff, 0x3, 0x14a7, 0x2, 0xfffff801, 0xff, 0x679, 0x4b, 0x1, 0x7, 0xb01, 0x2, 0x5, 0x4, 0x4, 0x3, 0x4, 0x1, 0x3, 0x19, 0x7f, 0x8000, 0x7f, 0xb4, 0x5, 0x7d92, 0x2, 0x4, 0x20, 0x2, 0x2, 0x401, 0x4, 0x3, 0x4, 0x5, 0x0, 0x9, 0x8001], [0xfffffffe, 0x4, 0x1000, 0x7, 0xffff0000, 0x1f, 0x8, 0x0, 0x8, 0x1, 0xbc8, 0x3, 0xd9, 0x8, 0x661, 0x1, 0x2, 0x2, 0xfffffffa, 0x331ba793, 0x1, 0x6, 0x80000000, 0x10001, 0x7fff, 0x4, 0x5, 0xec, 0xfffffffd, 0x61, 0x80, 0x5, 0x9, 0x4, 0x9, 0x432, 0x67e9, 0x1, 0x716, 0x1, 0x63f, 0xffff2fd9, 0x200, 0x9, 0x6, 0x80, 0xffffffff, 0x80000000, 0x9, 0x7fff, 0x55, 0x7ff, 0x8000, 0x19d0, 0x2, 0x9, 0x7, 0x80000001, 0x200, 0x8, 0x4, 0x1f, 0x400, 0xa6d6], [0x1, 0x4, 0x8, 0x41f8, 0x800, 0x3, 0xfff, 0x0, 0x3, 0xffffffff, 0x6, 0xecce, 0x80000000, 0x7f, 0x2, 0x6, 0x3, 0x0, 0x1, 0x1000, 0x7, 0x3, 0x2, 0x1, 0x3, 0x5, 0xdd, 0x4, 0x26a2ed9b, 0x5, 0x7, 0xdf8, 0x3d, 0x5, 0x1000, 0x3a, 0xc06e, 0x4, 0x1, 0x6, 0x669, 0x200, 0x4, 0x5, 0x401, 0x0, 0x0, 0xfe, 0x6, 0x5, 0x9, 0x6, 0x7fffffff, 0x4, 0x3e8, 0x32, 0xdd0, 0x6f, 0x7d, 0x5, 0x7, 0x8, 0x9, 0xff], 0xe, ['tunl0\x00', '\\^\x00', 'ipvs\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x40}, 0x20024001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getpeername$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x20) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0x10000000) 04:37:14 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x1000000, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:14 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x8000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:14 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) semctl$SEM_STAT(0xffffffffffffffff, 0x2, 0x12, &(0x7f0000000100)=""/26) r0 = semget(0x3, 0x1, 0x35) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000140)=""/209) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10, 0xc013, 0xffffffffffffffff, 0x8000000) 04:37:14 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x3c) 04:37:14 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x6c0) [ 1713.729013][ T7325] AppArmor: change_hat: Invalid input '#' 04:37:14 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x200002ab) 04:37:14 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x10000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:14 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x7ec0}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:14 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) getrusage(0xffffffffffffffff, &(0x7f0000000100)) socketpair(0x2b, 0x8000e, 0x80000001, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) accept4$tipc(r1, &(0x7f0000000280)=@id, &(0x7f00000002c0)=0x10, 0xe2a7ff617e043ff5) connect$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000380), 0x4) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x0, @multicast1, 0x4e20, 0x4, 'rr\x00', 0xc, 0xfffffffe, 0x2e}, {@private=0xa010101, 0x4e21, 0x0, 0x7, 0xfffffffd, 0x101}}, 0x44) 04:37:14 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x81, 0x4) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="636861c2f5000000000000"], 0x3c) 04:37:14 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES64, @ANYBLOB="14d4c2dd811b58ca00cfc6c3a1536ab89d62c0620cbc541b04ce9c1de2f063510e50c4abd11aaf2bef7102e604d827a3966e8c5fe9688421e5387aecd9d61a9f88f9", @ANYRESHEX=r1, @ANYRES64, @ANYRES64=r2, @ANYRES32], 0x3c) 04:37:14 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x7ffff000) [ 1714.621034][ T7365] AppArmor: change_hat: Invalid input '#' [ 1714.779834][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 1714.779845][ T36] audit: type=1400 audit(1615783034.649:550): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7394 comm="syz-executor.2" [ 1714.852346][ T36] audit: type=1400 audit(1615783034.719:551): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7408 comm="syz-executor.2" 04:37:15 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x2000000, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:15 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x18000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:15 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3, 0x20, 0x1, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000140)) 04:37:15 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0xffffffffffffffff) 04:37:15 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x448102, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000004c0)={{&(0x7f0000000440)={'GENERAL\x00', {&(0x7f0000000180)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {0xcbb}, {&(0x7f00000000c0)=@adf_dec={@format={'Cy', '5', 'RingRx\x00'}, {0x8}}}}}, {&(0x7f00000003c0)={'Accelerator1\x00', {&(0x7f0000000300)=@adf_dec={@normal='NumberDcInstances\x00', {0x4}, {&(0x7f0000000240)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x200}}}}}}}}}, 0x7f}) 04:37:15 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a381bc03000000000000002e0277"], 0x2b) r1 = memfd_create(&(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r1, 0x1, 0x4000}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getpeername$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x20) 04:37:15 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xa81, &(0x7f0000000200)={0x0, 0xd9d7, 0x2, 0x3, 0x2c3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_complete(r0) syz_io_uring_setup(0x3bd, &(0x7f0000000100)={0x0, 0x852, 0x10, 0x1, 0x143}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r2, 0x8000000) syz_io_uring_setup(0x236a, &(0x7f0000000300)={0x0, 0x2ca4, 0x1, 0x3, 0x368}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r2, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x8000000) [ 1715.495250][ T7418] AppArmor: change_hat: Invalid input '#' 04:37:15 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xc07e}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:15 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1e000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:15 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x8000000) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x24, @none={0x0, 0x2}}, 0x14) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)=""/74, &(0x7f0000000000)=0x4a) 04:37:15 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) r1 = syz_io_uring_setup(0x6a86, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x6728, &(0x7f0000000100)={0x0, 0x131e, 0x10, 0x0, 0x2c, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x11, r2, 0x10000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf2502000000060001000700168f08670008001900ac14141a05000400080000000800090001000000050014000000000005000d00010000000600010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040014}, 0x20000080) 04:37:15 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660da0f, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self\x00', 0x301000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) accept4$tipc(r1, &(0x7f0000000480)=@name, &(0x7f00000004c0)=0x10, 0x80800) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000003c0)={0x0, 0x20, 0x9}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f00000002c0)={{&(0x7f0000000240)={'GENERAL\x00', {&(0x7f0000000180)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {"4a41fc580546cfd49e68692fb7a5fb6f95b2d99a73ed7c738c16efa2bbeb3e628e6e65cb8ad43f98d1786ed88efb6804f9e1deb92de6b436ece537333bb84708"}, {&(0x7f00000000c0)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}, {0x2103}}}}}}}, 0x1}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000500)) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x2b) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000300)) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x401, &(0x7f0000000080)=0x4) 04:37:15 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x34000000, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1715.495980][ T7418] AppArmor: change_hat: Invalid input '#' [ 1715.547703][ T36] audit: type=1400 audit(1615783035.419:552): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7426 comm="syz-executor.2" [ 1715.572031][ T36] audit: type=1400 audit(1615783035.429:553): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7426 comm="syz-executor.2" 04:37:15 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[], 0x3c) 04:37:15 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @default}, [@netrom, @remote, @null, @bcast, @null, @null, @remote, @null]}, &(0x7f0000000180)=0x80) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0)=0x9, 0x4) 04:37:15 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1e178000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1715.657173][ T7451] AppArmor: change_hat: Invalid input '#' 04:37:15 executing program 0: syz_io_uring_setup(0x2000, &(0x7f0000000000)={0x0, 0xce3f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) 04:37:15 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}, 0xff}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="91331c885dec2fa7dec16945f7d5b699d91539544eb286032053a648b6eaf0b7d5dc162a3e38de80726acf8587645ebebd5fcf6a54a096edb175b8259a1b51611d58f3579e734bd7b074be9289b7ad8346d06c1028c4e8e66df3d823adb7448ad243f7e6224db4e2b7eada13f4790c4bd9c5245b059ef06839951b9c20ba3ee31c052410326a8945b8cd22558e2768fe972a9721d272e79879aa6185340c8b92bcc8ed8266d7ccebc9f955847b41576cbc3236e39d04", 0xb6}}, 0x850) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:15 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x3b9aca00, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:16 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x40000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:16 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehav #'], 0x3c) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@bcast, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 04:37:16 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x20000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:16 executing program 0: r0 = syz_io_uring_setup(0x6b80, &(0x7f0000000000)={0x0, 0xdaf7, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000007, 0x110, r0, 0x10000000) 04:37:16 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) write$apparmor_current(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0], 0x2b) 04:37:16 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8814}, 0x20004090) 04:37:16 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, r0, 0x10000000) 04:37:16 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x20fff000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:16 executing program 2: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000000)) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd701fa9887ae48ab2e0277c68fe0ea0f6fd02dd239dd9b45ca434d7d03b39425c93737f326904a574fa14ba45a22d03eaa126077e5b7d1095261d6883d22b1a333474f11f00b08a3589aa2ac83de9ac15a2d20baf0c181c9292c1b5aa3177b363a312658429ae5f55d9144"], 0x2b) [ 1715.658070][ T7451] AppArmor: change_hat: Invalid input '#' [ 1716.547360][ T36] audit: type=1400 audit(1615783036.420:554): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7486 comm="syz-executor.3" [ 1716.575034][ T36] audit: type=1400 audit(1615783036.430:555): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7496 comm="syz-executor.2" 04:37:16 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xca9a3b}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:16 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:16 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x7ffff000, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:16 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000100)={0x4c, "071e7679547bb9535e1539eaeb993b5b31c84e1f0220f0d61705cccc2383a9bdb1878c35404178ae1bdde995084652dad96da69a06a800d15e638f62b13ad114f46174a8e3893bb8bc797fcc"}) 04:37:16 executing program 2: r0 = syz_io_uring_complete(0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x6, 0x4) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70724f66698265202ff830a837343391482a8063020000"], 0x2b) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) getuid() syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000, 0x1}, 0x80000000) socket$inet_udp(0x2, 0x2, 0x0) [ 1716.636419][ T36] audit: type=1400 audit(1615783036.430:556): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7496 comm="syz-executor.2" 04:37:16 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x2000000, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) syz_io_uring_submit(r1, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)="9505ae081a7fd9d0949cbebebd7a09cd434a87134a1a0a681fd2d05896c8dec6b5c76e44bbd0adf566d5d782488ce76a140f7bc609d477", 0x37, 0x101}, 0xfff) syz_io_uring_setup(0x1abc, &(0x7f0000000180)={0x0, 0x53db, 0x0, 0x1, 0x116, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r4 = syz_io_uring_complete(r1) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000140)={0x10001, 0x0, 0x1}) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000100)) 04:37:16 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x24000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:16 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x1000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1716.717103][ T7520] AppArmor: change_hat: Invalid input '#' [ 1716.717370][ T36] audit: type=1400 audit(1615783036.450:557): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7486 comm="syz-executor.3" 04:37:16 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) [ 1716.769898][ T36] audit: type=1400 audit(1615783036.540:558): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7505 comm="syz-executor.2" 04:37:16 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xc07e0000, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:16 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_io_uring_complete(0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x2b) 04:37:16 executing program 0: r0 = msgget$private(0x0, 0x483) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000100)=""/99) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:16 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2a000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1716.814871][ T36] audit: type=1400 audit(1615783036.640:559): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7518 comm="syz-executor.2" 04:37:16 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRESOCT], 0x3c) 04:37:16 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d7072e1d2f16f65202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:16 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x8010, r0, 0xc26) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x3, 0x7, {{0xc, 0x4, 0x1, 0x18, 0x30, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xce, 0x3, 0xe, [{@remote}, {@local, 0x6}, {@loopback, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x1, 0x8080, 0x5, 0x1000, {{0x10, 0x4, 0x3, 0x6, 0x40, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xf9, [@multicast1, @broadcast, @empty, @loopback, @multicast1]}, @generic={0x86, 0xf, "1d16890cf6fa5389fd978b626a"}]}}}}}) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000100)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:16 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xffffff7f, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:16 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r2, &(0x7f0000000440)=@sco, &(0x7f00000004c0)=0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000500)={0x7, 0x74, 0x20, 0x0, 0xfffffff7, 0x0, 0x0, 0x8, 0x0, 0x5, 0x5, 0x0, 0x0, 0x49, 0x100, 0x1f, 0x2, 0x1, 0x6, [], 0x1, 0xffffffff}) recvfrom$ax25(r1, &(0x7f00000000c0)=""/173, 0xad, 0x0, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x3c) r4 = accept4$ax25(r1, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @default, @remote, @remote, @netrom, @netrom, @null]}, &(0x7f0000000080)=0x48, 0x80000) recvfrom$ax25(r4, &(0x7f0000000340)=""/248, 0xf8, 0x10040, 0x0, 0x0) 04:37:16 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x30000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:17 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x2000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:17 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = syz_io_uring_setup(0x1e38, &(0x7f0000000080)={0x0, 0x3007, 0x10, 0x0, 0x1c2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x13, r3, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[], 0x2b) 04:37:17 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x6401, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000100)='>-\x00') syz_io_uring_setup(0x1b0a, &(0x7f0000000000)={0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:17 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x6, 0xffffff00, 0x3ff, 0x81, 0x4, 0x8, 0x40, 0x8, 0x40, 0x58, 0xbc, "60e239439fd4bed48cad174e718f5a41be1082d9369b80949a6f12919b91575b"}) 04:37:17 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x36000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:17 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000003c0)={&(0x7f0000000140), &(0x7f00000002c0)=""/246, 0xf6}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00680000102f90780a3394bf109218bd0c07c7e0000002009fb7134212e4b339b60014c6036c619f5d457721401ab759f457b989ff59ae29dd968e5179b70be9799b6cbc33c6982e249485b88596500baf72bc7169bae6450a71204844f1976516683535725711cb3e9420611984524ed478602cad8fe6b9a18e288d1f6e"]}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', r0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)={0x44c, 0x3f4, 0x0, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1, 0x18, [0x5, 0x81, 0x9, 0x9, 0x7, 0x4, 0xa0000000, 0x0, 0xc06, 0x0, 0x9, 0x1a, 0x4, 0x3, 0x1000, 0x9, 0x5, 0xfffffff7, 0xfff, 0x6, 0x10001, 0x6ae6, 0x8, 0x1000, 0x4, 0x80000001, 0x5, 0x0, 0x6, 0x165, 0xffffff2e, 0x129, 0x5, 0x3, 0x12a000, 0x1000, 0x9, 0x1f, 0x2fd, 0x5fb7, 0x6, 0x9, 0x5, 0x7, 0x7fff, 0x9, 0x1, 0x401, 0x3, 0x6, 0x3, 0x200, 0x8, 0x8, 0x1, 0x20, 0x3, 0x9, 0x1, 0x1000, 0x14ef7e0d, 0x5, 0x200, 0x7ff], [0x1, 0x0, 0xff99, 0x7fff, 0xfaf4, 0xbb, 0x9, 0x66, 0x1, 0x5e, 0x8, 0x898d, 0x4c56f30f, 0x3, 0x2, 0x1, 0x6, 0xc, 0x7, 0x8c, 0x8, 0x9, 0x83b, 0x5, 0x0, 0x453a3579, 0x4, 0x8, 0x0, 0x2, 0x2, 0x5, 0xf29c, 0xffff, 0x1e, 0x7, 0x4119dcd4, 0x3, 0xe5ef, 0x8, 0x7fffffff, 0x5, 0x1, 0x2000, 0x7fb2, 0x0, 0x3, 0x800, 0x0, 0x5, 0x7bd9c4c2, 0x7e3, 0x5, 0xff, 0x6, 0x3, 0x1, 0xb3, 0x400, 0x9, 0x777, 0x1, 0xffffff81, 0x3], [0x3, 0x3, 0x80, 0x800, 0xce1c, 0x411, 0x0, 0x10001, 0x101, 0x1, 0x3, 0x7ff, 0x2e, 0x5, 0x6, 0xff, 0x9, 0x3, 0xc8c, 0x200, 0x81, 0xddd2, 0x8, 0x8, 0x7, 0x6, 0x1, 0x8, 0x9, 0x0, 0x0, 0x400, 0x9, 0xffffffe1, 0x101, 0x8, 0x8, 0x81, 0x4, 0x19, 0x8f, 0x8, 0x1, 0xfff, 0xe2a2, 0x6, 0x5, 0x6, 0x8001, 0x1, 0x80, 0x6, 0x3, 0x6, 0x3f, 0x2, 0x0, 0xfff, 0x4, 0x9, 0x8a19, 0x5, 0x20, 0x100], [0x2a74, 0x7fffffff, 0x5, 0x7ff, 0xffffffff, 0x4bc6c7c0, 0x4, 0x4, 0x6, 0x7f, 0x4, 0xffff, 0x4, 0x0, 0x7f, 0x9, 0x8001, 0x0, 0x3, 0x401, 0x61, 0x0, 0x4, 0x7, 0x0, 0x7b2, 0x2, 0x3, 0xfff, 0x5, 0x1ecd, 0xff, 0x1d8d, 0x8, 0xfffffbff, 0x9, 0x1, 0x5, 0x3f, 0xffff, 0xa9, 0x4, 0x8, 0x5, 0x7, 0x2, 0x47, 0x0, 0x200, 0x8, 0x6, 0x5, 0x7, 0x9, 0x3fc, 0xfffffff8, 0x3, 0xa96, 0x10001, 0xe4d1, 0x5, 0x8, 0x8000, 0xb5], 0x2a, ['ipvs\x00', 'l2tp\x00', '&\x00', '#{,\x00', 'l2tp\x00', ',%.+./(^+}@\x97&,[\x00', '..\x00', '\x00', '\x00']}, ["", "", "", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:17 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:17 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3c000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:17 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x10001, &(0x7f0000000140)=0x4) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x2, 0x5e, ['&-\\\x00}\x80', '/proc/thread-self/attr/current\x00', '%:\x00']}, 0x45) [ 1716.860919][ T7547] AppArmor: change_hat: Invalid input '#' [ 1717.716462][ T7586] AppArmor: change_hat: Invalid input '#' 04:37:17 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x2}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:17 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xc100000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:17 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) write$apparmor_current(r3, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r1, @ANYRES16=r3], 0x2b) 04:37:17 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) r4 = socket$inet(0x2, 0x80000, 0xcecc) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x7, 0x0, @fd_index=0x6, 0x0, 0x0, 0x9, 0x3, 0x0, {0x0, 0x0, r4}}, 0x1) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_ifreq(r5, 0x8914, &(0x7f0000000140)={'bridge0\x00', @ifru_map}) 04:37:17 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x42000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:17 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$sock_ifreq(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00', @ifru_mtu}) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"]}) r2 = socket(0x6, 0x80000, 0x3ff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9e}]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000000c0)={0xd3, "76cf2e4bc8c3b39cd2bb77b1bb6c572ae14c10ec96e2aae261a8edd8957d50f05a8da837dd26899ea60fbc9890d9c79c48cb3860beb372abd3f685bb8d1de7451b61bc3a21aa5e6b1988f187cdada4fbf4818715ce1f31f739b528f9f69dd56bf74d0f6ecc67b9e26ffcdaddeaf84befb1bfa6b5d2a3c8d58895f6d4f92b111d363fa3aed81ea5190ddd75bc0e0d9ffaf731f9a6f9226906bd294222c4e2cdd3ac90b063e31417242a059453aae8408271171e863a507e958d6306c7b342f05610a87f13d186d6a7e4b5e97b7202875fec5e1c"}) ioctl$KVM_SMI(r0, 0xaeb7) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000240)) write$apparmor_current(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) [ 1717.728476][ T7595] AppArmor: change_hat: Invalid input '#' 04:37:17 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065400d70080004000065202ff830a837343391482ad760fa98876748ab2a02762f76d3113f0e87b958339e49db761db5e9f4a8007a08c0d03a5fa124b58ba56c318d6d5e3eecc47943aeb0d490a9f42614372161081444f8970000000000e4ff00000000000000"], 0x2b) io_uring_setup(0x5145, &(0x7f0000000180)={0x0, 0xc92b, 0x2, 0x0, 0x311}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xb9) 04:37:17 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x30080, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0x4000010, r0, 0x0) 04:37:17 executing program 3: ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000841}, 0x20000000) [ 1717.828031][ T7610] AppArmor: change_hat: Invalid input '#' 04:37:17 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x91000100]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:17 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x4}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:17 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) socket$inet6_sctp(0xa, 0x5, 0x84) 04:37:17 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) 04:37:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x34000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:18 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:18 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x800, 0x0) bind$ax25(r1, &(0x7f00000000c0)={{0x3, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 04:37:18 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xfeffffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:18 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:18 executing program 0: syz_io_uring_setup(0x684b, &(0x7f0000000000)={0x0, 0x964d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f00000000c0)={'team0\x00', @ifru_flags}) 04:37:18 executing program 2: r0 = socket(0x5, 0x5, 0xfc1) sendto$l2tp6(r0, &(0x7f0000000000)="1dac356cd16398581a0416b857a5dcb27d263660b5fe41a1b14f06754fe7ac0c2507c43213c6e489a57561171d9443f3911334a3a69fd280c1a4b1fce5c8deef", 0x40, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x8, @mcast1, 0x8}, 0x20) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:18 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xff000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:18 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6368ee0467656861742023"], 0x3c) 04:37:18 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x10}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:18 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x7569, &(0x7f0000000280)={0x0, 0xbb05, 0x4, 0x1, 0x22e, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_setup(0x3801, &(0x7f0000000380)={0x0, 0x559d, 0x20, 0x2, 0x35a, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r2 = syz_io_uring_setup(0x7fb3, &(0x7f0000000100)={0x0, 0x8abc, 0x10, 0x3, 0x31c, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x110, r2, 0x10000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1b, 0xfffff734, 0x2, 0x7f, 0x248, 0x1, 0x81, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000240)=0x1, 0x0, 0x4) 04:37:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x3b9aca00}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:18 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="09000000bb00000000406e0f000000000300000000000000e1ffffff000000000000000000000000640000000000000002000000000000000000000000000000000000000009000000000100000000000000020000000000000020000000000000000100010000000000000000800000000004000000000000000700000000000000070000000000000000"]) write$sysctl(r1, &(0x7f0000000000)='3\x00', 0x2) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehDt #'], 0x3c) syz_io_uring_complete(0x0) 04:37:18 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xffff8000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:18 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000002c0)={[0x7, 0x9, 0xfffffc00, 0xd6d3, 0x1, 0x9, 0x3, 0x3f, 0x1, 0x396, 0x2, 0x8, 0x8001, 0x200, 0x1, 0x5, 0x5, 0x8001, 0x1c1f, 0x0, 0x6, 0x1, 0x7, 0x5, 0x80000001, 0x9, 0x7c55, 0x9, 0x1, 0x20000000, 0x0, 0x0, 0x5, 0x3, 0xfffffff8, 0x0, 0xf5, 0x7, 0x1000, 0xf5e, 0x48, 0x9, 0x400, 0x4, 0x8bf, 0x9, 0x2, 0xc925, 0x3, 0x2, 0x2, 0x100, 0x10001, 0x6, 0x1000, 0x0, 0x9, 0x80000001, 0x7, 0x1f, 0xca, 0xfff, 0xea, 0xffff, 0x8b5, 0x80, 0x4, 0x4, 0x0, 0x6, 0x1, 0xffff, 0x6, 0x3, 0x0, 0x2, 0x3, 0x40, 0x80000000, 0x0, 0x1, 0x7, 0x80000001, 0x3, 0x81, 0x8, 0x7fffffff, 0x4, 0x101, 0x54, 0x5, 0x6, 0x3, 0x3, 0xe4, 0x6, 0x80000001, 0x4, 0x0, 0x80000000, 0x4, 0xffff, 0x1, 0x1, 0xfffffffa, 0xc3d97d9, 0x5, 0x85, 0x8001, 0x1, 0x73, 0x9, 0x0, 0x80, 0x0, 0x1, 0x401, 0x8, 0x10000, 0xff, 0x0, 0x36, 0x2, 0x9, 0x34400000, 0x7, 0x8, 0x4, 0xff, 0x9, 0x8, 0x80000001, 0xffffff81, 0x5, 0x8, 0x1, 0x0, 0x7ff, 0xa6, 0x7, 0xffffffff, 0x8000, 0x1, 0x7, 0x3f, 0x2e96b859, 0x6, 0x3ff, 0x80000001, 0x1ff, 0x6, 0xfffff001, 0xc6cf, 0x3, 0x10001, 0xffffffff, 0xffffbb13, 0x101, 0x6, 0x92, 0x5, 0x2, 0xa4, 0x7ff, 0xffffffc0, 0x417, 0x40, 0x2, 0xffff, 0x7f2, 0x1, 0x200, 0x7fff, 0xff, 0x8001, 0x800, 0x20, 0x6, 0x1, 0x400, 0x6, 0x6, 0x9, 0x7ff, 0x0, 0x7, 0x0, 0x7, 0x101, 0x10001, 0x9, 0x1f, 0x2, 0x0, 0x6, 0x200, 0xa1a, 0x1, 0x6, 0x7fe, 0x6, 0x80000001, 0x5ec, 0x0, 0x80000001, 0x1f, 0x7ff, 0x7ff, 0x7fff, 0x7, 0x2, 0x0, 0x400, 0x100, 0x4, 0xfffffffa, 0x80, 0x512e, 0x1, 0xd0, 0x2, 0x1000, 0x8000, 0x8, 0x8, 0xfffff7a3, 0x9, 0x0, 0x1000, 0x4, 0x6, 0xffff, 0x200, 0x800, 0xffffff00, 0x67043f2d, 0x8, 0x1, 0x9, 0xfffffffb, 0x9, 0x7, 0xfff, 0x3bb, 0x0, 0x2, 0x9, 0x7fff, 0x8, 0x28b, 0x0, 0x2, 0x2, 0x2, 0x40f778af, 0x7fffffff, 0xca, 0xb5a, 0x8001, 0x96, 0x101, 0x6, 0x1, 0xff, 0x10000, 0xed, 0x2, 0x305, 0x7ff, 0xb1, 0xbd30, 0x0, 0x4, 0xff, 0x200, 0xffff6f72, 0x1, 0x200, 0x8, 0x81, 0x40, 0x3, 0x8e1, 0xfffffffe, 0x80, 0x3, 0x49db, 0x5f5, 0x7fff, 0x1, 0xfff, 0x1, 0x70000000, 0x3, 0xffff, 0x6, 0x1, 0x0, 0x0, 0x81, 0x4, 0xf39c, 0x2, 0x40, 0x2, 0x401, 0x6, 0x5, 0xffffffff, 0x101, 0x7, 0xd0c, 0x2, 0x6, 0x4, 0x4, 0xff000000, 0x0, 0x7, 0x10001, 0x1, 0x7f, 0x0, 0x332b0, 0x200, 0x2, 0x7, 0x2, 0x80000001, 0x4, 0x1, 0x400, 0xff, 0x6, 0x8aa5, 0x9, 0x2, 0x3, 0x7, 0x1320134c, 0x1000, 0x154, 0x0, 0x10000, 0xfff, 0x3, 0x8, 0x3, 0x3, 0x9, 0x7, 0x3, 0x35, 0x3ff, 0x3ff, 0x7f, 0x8, 0x5, 0x9, 0x7ff, 0x7, 0x1, 0x3, 0x97, 0x9, 0x16, 0xffffffff, 0x1000, 0x3, 0x40, 0x3f, 0x8, 0x4, 0x3, 0x2, 0xa5, 0x9, 0x8000, 0x2, 0x800, 0x2, 0x80000001, 0x9, 0x400, 0x0, 0x5, 0x13, 0xfffffeff, 0x0, 0x401, 0x3, 0x838, 0x9, 0x100, 0x3, 0x1000, 0x3f, 0x6, 0xfffffff9, 0x7, 0x1, 0x6, 0x5, 0x3f, 0x2, 0x81, 0xffffffff, 0x7, 0x0, 0x2002, 0x98fd, 0x3821, 0x5026abeb, 0xff, 0x400, 0x80000000, 0x3, 0x3, 0xffffffff, 0x10000, 0x8, 0x7ff, 0x9, 0x1eb13b5b, 0xffff0000, 0x800, 0x4, 0x1, 0x20, 0x7, 0x80, 0x7, 0xffffffc2, 0xffffff80, 0xfff, 0x4, 0x8, 0x40c, 0x2, 0x9, 0x8, 0x101, 0x9, 0xfffffffd, 0x8d93, 0x1, 0x3, 0x9, 0x8, 0x80, 0xac76, 0x4, 0x3, 0xfffffffa, 0x2, 0x0, 0x54dfa55f, 0xfffff000, 0xff, 0x0, 0xc000000, 0x7fffffff, 0x6, 0x4, 0x1, 0x0, 0x5, 0x9, 0x3, 0x0, 0x2, 0x7, 0x80000000, 0x3, 0x6, 0x4, 0x0, 0x7c6, 0x200, 0x7, 0x3, 0x4, 0x1, 0x6, 0x72b, 0xfff, 0x3f, 0x3, 0x6, 0x1, 0x8001, 0xb3f, 0x7ff, 0x200, 0xffffff80, 0x9, 0x18ca0, 0x6, 0x9, 0xffffffff, 0x4, 0xcc, 0x1, 0x800, 0x9, 0x1, 0x6, 0x6, 0xa68, 0x400, 0x8, 0x4, 0x7, 0x6, 0x100, 0x3f8, 0x5, 0x2, 0x7, 0x80000001, 0x8, 0x28af750d, 0x3ff, 0x3, 0x8, 0x1, 0xe000, 0x5, 0x3, 0x4, 0x1, 0x9, 0x7, 0x7111a146, 0x0, 0xa4d1, 0x1, 0x1000, 0x3, 0x9, 0x0, 0x40, 0x5, 0x0, 0x8, 0x4, 0x7, 0x9, 0x2, 0x101, 0x7, 0x8, 0x80000001, 0x9b, 0x2, 0x0, 0x8, 0x7ff, 0x5, 0x6, 0x1, 0x80000001, 0x6347, 0xffffffff, 0x78, 0x0, 0x9, 0x2, 0x10001, 0x8, 0x2, 0x7fff, 0x9, 0x3, 0x200, 0xffffffff, 0x1, 0x5, 0xffff, 0x8, 0x7f, 0x3, 0x80, 0x8, 0x0, 0x10001, 0x0, 0x2, 0x1, 0x7, 0x0, 0x0, 0xffff, 0x7, 0xfff, 0x7ff, 0x8001, 0x7f, 0xdcf2, 0x8, 0x56900, 0xccac, 0x7, 0x24b, 0x5, 0x1, 0x10000, 0xfffffffd, 0x41f, 0xfff, 0x32442779, 0x8, 0x2, 0x64, 0x8, 0x9, 0x9, 0x0, 0x6, 0x2, 0x8000000, 0x0, 0x5, 0x8, 0x2, 0x800, 0x1, 0x5, 0xfffffffb, 0x4, 0x6, 0x1, 0x5, 0x4, 0x4, 0x1, 0x9, 0x6c925104, 0x10000, 0x7, 0x1, 0x8, 0x200, 0xb23, 0x7a, 0x64, 0x5, 0x7ff, 0x0, 0x3f, 0x3, 0x8, 0x558a, 0x4, 0x7fffffff, 0xfffffff7, 0x5, 0x2, 0x7, 0x3db, 0x40, 0x5, 0xfffffc00, 0xe6, 0x2, 0x1, 0x1, 0x1, 0x7, 0x0, 0x9f4, 0x4, 0x9, 0x4, 0x3d2, 0x40, 0x20, 0x7ff, 0x8, 0x9, 0x7, 0x6, 0xb46, 0x12, 0x7, 0x8001, 0x6, 0x0, 0x2e6, 0x2, 0x1000, 0x1, 0x4, 0xb4, 0x0, 0xff, 0x4c79f4b4, 0xffffff01, 0xd3b, 0x5de, 0x8, 0x5, 0x0, 0x0, 0x5, 0x10001, 0x7, 0x2, 0x9, 0x200, 0x8000, 0x3ff, 0x0, 0xa6a8, 0xd3, 0x800, 0x7, 0x7, 0x5, 0x2, 0x3, 0xffff8001, 0x13, 0x10, 0x1ff, 0xfffff801, 0x80000001, 0x8, 0xf2, 0x0, 0x3, 0x9, 0x1ff, 0x8, 0x44d7dd47, 0x10001, 0xaa14, 0x7c, 0x3, 0x6, 0xfc000000, 0x1, 0x400, 0x1000, 0x3, 0xfff, 0x4, 0x3ff, 0x2, 0x0, 0x5, 0x9, 0x6, 0x6c06, 0xfffffff7, 0xda12, 0x2, 0x10000, 0x91, 0x400, 0x4c651bcf, 0xa7e, 0x200, 0xffffffff, 0x5, 0x9, 0xffffff0e, 0x40, 0x4, 0x1, 0x4, 0x2, 0x8, 0x20, 0x8, 0x4, 0x400, 0x20, 0x1f, 0x40, 0xc8a, 0xc6e, 0xfffffff7, 0x7, 0x20, 0x469, 0x3, 0xfffff000, 0x1000, 0x3, 0x7fffffff, 0x10001, 0x0, 0x4, 0x8, 0x2, 0xf92c, 0x3, 0x7fffffff, 0x1, 0x0, 0x800, 0x3, 0x7fff, 0x81, 0x5, 0xffff, 0xe2a2, 0xab2, 0x7, 0x7, 0x37, 0x1f, 0x401, 0x1000, 0x7, 0x1, 0x1, 0x861, 0x0, 0x3, 0x7, 0x80000000, 0xffff, 0x6, 0x7, 0x2, 0x1f, 0x1f, 0x0, 0x3, 0x1000, 0xffffffff, 0x72, 0x800, 0x6, 0x7, 0x5, 0x7, 0x5, 0x80000000, 0x800, 0x7fffffff, 0x80000001, 0x7, 0x7, 0x800, 0x4, 0x3, 0x9, 0x6, 0x7, 0x3f, 0xffffff01, 0x0, 0x9, 0x2, 0x6, 0x20, 0x35, 0x45, 0x71, 0x10002000, 0x81, 0x1ff, 0xfff, 0x4, 0x75b, 0x5, 0x10001, 0x8, 0x80, 0x7, 0x8, 0xfff, 0x5, 0x5, 0x9, 0x94d, 0x3ff, 0x4, 0x8001, 0x2, 0x3, 0x0, 0x9fd, 0x6, 0x334d, 0x8, 0x5, 0x1000, 0x5, 0x200000, 0x3, 0x10000, 0x1, 0x5, 0x7017, 0x6, 0x40, 0x5fd, 0xbb, 0xffffffff, 0x1, 0x9a2, 0x6, 0x6, 0x3, 0xfffffff9, 0x7ff, 0xa8, 0x7, 0x7, 0x40, 0x9, 0x8001, 0x101, 0x8, 0x10, 0x0, 0x0, 0x6, 0x9, 0x2, 0x1ff, 0x9, 0x400, 0x5, 0x10000, 0x2, 0x1, 0x8, 0x8f, 0x8, 0x400, 0x62d, 0x2, 0x4b0, 0x10001, 0x1, 0x5, 0x6, 0x0, 0x6, 0x7, 0x8, 0x0, 0x7, 0xe7, 0x38b876b6, 0x5, 0xa02, 0xffffffff, 0x5, 0x5, 0x5, 0x8000, 0x8079, 0x7f, 0x3, 0x0, 0x9, 0x8, 0x6e7c, 0x9, 0x0, 0x8, 0x7fffffff, 0x1, 0x7, 0xdf, 0x9, 0xfffffffc, 0x1, 0x7f, 0x4, 0x1, 0x4, 0x4, 0x5b9c, 0x2, 0x8, 0x8, 0x0, 0x3, 0x1, 0x4, 0x5, 0x8000, 0x5, 0x4, 0x4, 0xc3ad, 0x200, 0x7, 0x69, 0x9, 0x564dc22d, 0x7, 0x80, 0x9, 0x8000, 0x6, 0x7c71, 0x7, 0x527, 0x4, 0x9, 0x3f, 0xc82, 0xffff, 0x8000, 0x400, 0x6946, 0x80000001, 0x28a, 0x80, 0x101, 0x7, 0x4, 0x7, 0xdf8, 0x2, 0xfffffffd]}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000012c0)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x50}}, 0x24000894) syz_io_uring_setup(0x1ae1, &(0x7f0000001380)={0x0, 0x38cc, 0x20, 0x2, 0x2aa}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001400)=0x0, &(0x7f0000001440)) syz_io_uring_submit(r1, 0x0, &(0x7f0000001480)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4004, @fd_index=0x3, 0x245, 0x0, 0x0, 0x1c, 0x0, {0x3}}, 0x101) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) pidfd_send_signal(r2, 0x22, &(0x7f0000000080)={0x35, 0x97, 0x7}, 0x0) 04:37:18 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6368618167656861742023"], 0x3c) 04:37:18 executing program 0: getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000140), 0x2) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x1492ca32) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x50, r0, 0x0) socket(0x1a, 0x5, 0x81) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x10000000) syz_io_uring_setup(0x3e23, &(0x7f0000000240)={0x0, 0x1039, 0x10, 0x2, 0x17}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r3 = syz_io_uring_complete(r2) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x284200, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) io_uring_setup(0x7de9, &(0x7f00000001c0)={0x0, 0x9de1, 0x20, 0x0, 0x10}) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000340)={0x81, 0xfffffffb}) 04:37:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xc07e0000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:18 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xffffc000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:18 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc1a385bcd760fa9887ae48ab2e0277"], 0x2b) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x3e6) r1 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f00000003c0)) socket$tipc(0x1e, 0x2, 0x0) 04:37:18 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x7, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x4, @empty, 0x4e20, 0x3, 'lblcr\x00', 0x0, 0x68d67d1d, 0x65}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0x35d, 0x0, 0x1ff}}, 0x44) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) [ 1717.912262][ T7629] AppArmor: change_hat: Invalid input '#' 04:37:19 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x34}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:19 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@remote, @remote, @null, @bcast, @null, @rose, @bcast]}, &(0x7f0000000000)=0x48) 04:37:19 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000a00)={{&(0x7f0000000980)={'Accelerator0\x00', {&(0x7f00000006c0)=@adf_dec={@format={'Cy', '3', 'RingAsymTx\x00'}, {0x4}, {&(0x7f0000000600)=@adf_dec={@normal='NumberDcInstances\x00', {0x9}}}}}, {&(0x7f0000000900)={'Accelerator1\x00', {&(0x7f0000000840)=@adf_dec={@format={'Cy', '5', 'RingRx\x00'}, {}, {&(0x7f0000000780)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {"5db43b4ce9ad72e597271417f9e5ad8290f04d1bd88cc21e658a99e9c53093ae0680384c2c8176317fa7a4b5a9fa0d08fadf147228f6fb8052a816dc002e45ba"}}}}}}}}}}) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x428, 0x3f3, 0x400, 0x70bd25, 0x25dfdbfb, {0x5, 0x2, 0x2e, [0x800, 0x0, 0x401, 0xfffff800, 0xa6, 0x101, 0x6, 0x2, 0x7, 0x0, 0x2, 0x10000, 0x1, 0x91, 0x84d0, 0x5d, 0x4, 0x9, 0x800, 0x4a2b, 0x6, 0xff, 0x7, 0x7a, 0x422, 0x3, 0x411f, 0x6, 0x9, 0x9, 0x80000000, 0x9, 0x1, 0x0, 0x9, 0x5, 0x6c82bf11, 0x9, 0x6, 0x8001, 0x4, 0x8000, 0x4, 0x5, 0x652, 0x8, 0x1, 0x7, 0x40, 0x7, 0x4, 0x100, 0x3f, 0x81, 0x3f, 0x0, 0x1, 0x35, 0xfffffd43, 0xff, 0x1000, 0x7, 0x9, 0x401], [0x6, 0x8, 0x3, 0x100, 0xffffffff, 0x1, 0x3f, 0xb6, 0x9, 0x0, 0x4, 0xdad, 0x9, 0x358, 0xb18, 0x80000001, 0x8000, 0x41, 0x10, 0xfffffff9, 0x100, 0x8, 0x1, 0x20, 0x0, 0x8, 0x9, 0x9, 0x7f, 0x3f, 0xfffffeff, 0x9, 0x40, 0x0, 0x3, 0x6, 0x6, 0xa5, 0x9, 0x79800, 0x23f0, 0x8, 0x7, 0x9, 0x3, 0x6, 0x7fff, 0x8, 0x4, 0x1, 0x1, 0x7000, 0xfffffaef, 0x1, 0xa1, 0x101, 0x7ff, 0x4, 0x9, 0xe4b, 0x1ff, 0xfffffffa, 0x5, 0x5], [0x8740, 0x3f, 0x1000, 0x7, 0x0, 0x0, 0x8000, 0x1, 0xfffffc33, 0x5, 0x9, 0x0, 0x1000, 0xfffffffa, 0x6, 0x8, 0x8001, 0x94, 0x8, 0x3f, 0x2a2ae443, 0x2e45, 0x0, 0x7ff, 0x1000, 0x1, 0x3ff, 0x1, 0xcf, 0x5, 0x40, 0xaf0, 0x400, 0xb1f, 0x9, 0x0, 0x137, 0x8, 0x200, 0x5, 0x0, 0xffffff80, 0x7, 0x2, 0x8000, 0x4, 0x3, 0x1, 0x10000, 0x1, 0xa, 0x101, 0xfff, 0xfffffff9, 0x4, 0xffff, 0x3, 0x100, 0x94e7, 0x7, 0x3, 0x8, 0x401, 0x60], [0x1, 0x2, 0x4, 0x26, 0xf4, 0xffffffff, 0x2400000, 0x8, 0x47, 0x3, 0x5040, 0x8f53, 0x5, 0x6203047d, 0xf07, 0x1ff, 0x3, 0x9, 0xffffffff, 0x9, 0x8, 0x0, 0x2, 0x4, 0x5, 0xa4, 0x1, 0x1f, 0x4, 0xfff, 0x1, 0x5, 0x9e, 0x7, 0x10001, 0x0, 0x1f, 0x3, 0x1, 0x8000, 0x80000000, 0xe91, 0x4, 0x7fffffff, 0x10000, 0x1ff, 0x6, 0xe5, 0x0, 0x3, 0x10000000, 0x3ff, 0x1, 0x2, 0x1, 0x2, 0x3, 0xfffffff7, 0x8, 0xd1241d12, 0x80000000, 0x8000, 0x7, 0x4], 0x6, ['\x06.+!#\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x24040810}, 0xa8050a87addad481) 04:37:19 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xfffffffe]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:19 executing program 3: accept(0xffffffffffffffff, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000400"/16, @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00680000102f90780a010102ffffffff8307c7e000000200"]}) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = accept(r2, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000006c0)=0x80) accept(r3, &(0x7f0000000700)=@rc={0x1f, @none}, &(0x7f0000000780)=0x80) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @loopback}, &(0x7f00000003c0)=0xc) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f00000007c0)={0x2, 0xa824}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @generic={0xff, 0x0, 0x3, 0x2, 0x4}, @jmp={0x5, 0x1, 0x9, 0x4, 0x7, 0xffffffffffffffe0, 0x4}]}, &(0x7f0000000300)='syzkaller\x00', 0xffffffff, 0xfffffffffffffdf3, &(0x7f0000000340)=""/15, 0x40f00, 0xf, [], r4, 0x18, r5, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x4, 0x9, 0x400}, 0x10}, 0x78) sendmsg$802154_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000100)={&(0x7f00000000c0)="fb39632b7a07220c830ab7b101ef940f3929fd757a8c0139c5032397816f37dbf4dee59683397c7c9227d586837150", 0x2f}, 0x1, 0x0, 0x0, 0x48000}, 0x4) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='ch\t\x00gehat #'], 0x3c) 04:37:19 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xffffff7f}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:19 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x2b) r2 = syz_io_uring_complete(0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000000)) 04:37:19 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:19 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x4000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:19 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default}) [ 1719.082718][ T7734] AppArmor: change_hat: Invalid input '#' [ 1719.823834][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 1719.823846][ T36] audit: type=1400 audit(1615783039.700:573): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7739 comm="syz-executor.2" 04:37:19 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x3400}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:19 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x1af0, &(0x7f0000000100)={0x0, 0x2aec, 0x4, 0x1, 0x2f3}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0), 0x4) 04:37:19 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x2b) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, 0xa, 0x7fffffff, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000440)=@bpq0='bpq0\x00', 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getpeername$ax25(r2, &(0x7f0000000340)={{0x3, @netrom}, [@bcast, @default, @remote, @bcast, @remote, @null, @bcast, @null]}, &(0x7f0000000140)=0x48) connect$ax25(r2, &(0x7f00000003c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0x8, &(0x7f0000000100)=0x2) [ 1719.901600][ T36] audit: type=1400 audit(1615783039.700:574): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7739 comm="syz-executor.2" 04:37:19 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:19 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000100)=""/91, 0x5b, 0x40000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x20) r0 = syz_io_uring_complete(0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r0, 0x10000000) 04:37:19 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'permhat ', 0x2, 0x5e, ['/proc/thread-self/attr/current\x00', '\x00', '/proc/thread-self/attr/current\x00', '$\\*%#{\x00']}, 0x61) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="63616e6765686174f2b4ab2b6894c9605fcfcba3ef0d6d310a7849b53c9aa84359bb21592d0de62300"], 0x3c) 04:37:19 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x20000, 0x8, 0x0, 0x4, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1719.969391][ T7768] AppArmor: change_hat: Invalid input '#' 04:37:19 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xca9a3b00000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:19 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x4]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1719.970212][ T7768] AppArmor: change_hat: Invalid input '#' [ 1720.039211][ T36] audit: type=1400 audit(1615783039.910:575): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7777 comm="syz-executor.3" 04:37:19 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) io_uring_setup(0x645a, &(0x7f0000000080)={0x0, 0x9695, 0x0, 0x0, 0x66}) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:19 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x7ec0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:19 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_io_uring_complete(r1) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:19 executing program 0: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000000)={[0x5, 0x2, 0x2, 0x6, 0x8, 0x40, 0x9, 0x3, 0x9, 0x3, 0xe9, 0x1, 0x0, 0x80, 0x5, 0x3, 0x6, 0x6, 0xd86, 0x2, 0x0, 0x1da, 0x51d, 0x7, 0x1, 0x9, 0xacb, 0x6, 0x4, 0x6, 0x5a, 0x7fffffff, 0xa8000000, 0x1, 0xfffffbff, 0x792daf26, 0x7ed, 0xb, 0x1ff, 0x4, 0x100, 0x7, 0x400, 0x6, 0x8, 0x10001, 0x8, 0xffffffc0, 0x2, 0x1, 0x4, 0x9, 0x1, 0xffffff13, 0x0, 0x7ff, 0x6, 0x0, 0x80000001, 0x2, 0x8, 0x6, 0x3, 0x94a, 0x4, 0x8, 0x1, 0x5, 0x7, 0x9, 0x7fff, 0x5, 0x87b, 0x8, 0x3, 0xffffffff, 0x2, 0x2, 0x23, 0x8, 0x8001, 0x1, 0x6, 0x1, 0x400, 0x1000, 0xa8d, 0x81, 0x80000000, 0xfffffffe, 0x800, 0x1, 0x400, 0x0, 0x5, 0x5052, 0x1f, 0x1f, 0x6, 0x3ff, 0xee1, 0x10001, 0xfffff18a, 0x6a, 0x6, 0x6, 0x20, 0xfffffddf, 0x230c4738, 0x4, 0x0, 0x1e9, 0x2a, 0x7, 0x9, 0x80, 0x1ff, 0x101, 0x1, 0xfffffffd, 0x4ad, 0x9, 0x0, 0x1, 0xc9e5, 0x82df, 0x3ff, 0x7, 0xffff, 0x8, 0xfff, 0x10c, 0x1ff, 0x400, 0x401, 0x80000000, 0x2fa, 0x2, 0x4, 0x10, 0xb2, 0x167, 0x0, 0x6, 0x3, 0x3ff, 0x3ff, 0xa0, 0x20000000, 0xf81, 0x400, 0x4, 0x80000000, 0x3, 0xffff, 0x7ff, 0x2, 0x1000, 0x3, 0x3, 0x7, 0x103, 0x3f, 0x4, 0xfa, 0x40, 0x9, 0x5, 0x6, 0x5e09, 0x8000, 0x3f8000, 0x200, 0x2, 0x8001, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0xffffffff, 0xffff, 0x4, 0xa4d1, 0x3, 0x994, 0x5, 0x8, 0x1, 0x5, 0x6, 0x400, 0x3f, 0x74e, 0x9, 0x400, 0xfff, 0xd02, 0x2, 0x5, 0x5, 0x6, 0x0, 0x6, 0x3, 0x2, 0x0, 0xd6, 0x10000, 0x7fff, 0x1, 0x4, 0x2, 0x6, 0x0, 0x4, 0x0, 0x6, 0x2, 0x4, 0x7, 0x1, 0x8, 0x7, 0x8, 0x7, 0xfffffff8, 0x1, 0x4c4, 0x6, 0xffffff01, 0x4eb7, 0x8, 0x2, 0x1, 0xf2, 0xffff, 0x101, 0x2, 0xc0000000, 0x5, 0x3f, 0x8, 0x5, 0x173, 0x3ff, 0x1ff, 0x4, 0x0, 0x2, 0xa000000, 0x80000001, 0x80000000, 0x9, 0x7, 0x0, 0x200, 0x63, 0xfffffff9, 0x5, 0x1, 0x9, 0x0, 0xffff01e8, 0x4548, 0x6, 0x7ff, 0x94, 0x7f, 0x5, 0x1, 0x0, 0x3ff, 0xff, 0x7, 0x1, 0x1, 0x6e8, 0x80, 0x10000, 0x6, 0xfffffff7, 0xfffffffb, 0x800, 0x2, 0x800, 0x8d9f, 0x6fc, 0x10001, 0x2, 0x3, 0x1f, 0xffffffff, 0xffffff7f, 0x0, 0x9, 0xffff, 0xe417, 0x8, 0x2, 0x10001, 0xad, 0x4, 0x6, 0x1, 0x7fff, 0x2, 0xffff8000, 0x2, 0x7, 0x1, 0x101, 0x1, 0xffff, 0x0, 0x1, 0xffffffc1, 0x99db, 0x852, 0x4, 0x1, 0x40, 0xe9, 0x0, 0x0, 0x3a, 0x401, 0x8000, 0x401, 0x101, 0x40, 0x3, 0x5, 0x2, 0x5, 0x5, 0x3, 0x2, 0xfff, 0x9, 0x1, 0x8, 0x2f, 0x5, 0x8020000, 0x2, 0xfc, 0x4479, 0xffffffff, 0x80000001, 0x8d6, 0x20000000, 0xffff, 0xef, 0x778345e1, 0x1f, 0x3, 0x7, 0x800, 0x1, 0xffffff81, 0x4b9, 0x0, 0xda0, 0x81, 0x9082, 0x100, 0x1, 0x7, 0x63, 0xe1da, 0x4, 0x912f, 0x3, 0x0, 0x1, 0x3, 0x6, 0x1e6, 0x7, 0x327, 0xffff, 0x7f, 0xf14f, 0x1, 0x1f, 0x8, 0x5, 0xd3f, 0x9, 0x8001, 0x62, 0x7ee, 0x8000, 0x4, 0xae8, 0x1, 0x1ff, 0xfffffffe, 0x8, 0x9, 0x2, 0x7f, 0x10000, 0xfffffffc, 0x9f7a, 0x4, 0x20, 0x3, 0x0, 0x8001, 0xfff, 0x0, 0x559, 0x8, 0xffffffea, 0x200, 0x5, 0x1, 0x8, 0x401, 0x0, 0x0, 0x6, 0x1, 0x200, 0x9, 0x7, 0x4, 0x7f, 0x7f, 0x0, 0x81, 0x9, 0xfffffff8, 0x8, 0x80, 0x7, 0x3, 0x1, 0x0, 0x80, 0x4, 0x0, 0x49, 0x1, 0x10001, 0x58, 0x7fff, 0x5, 0x2, 0xa9ff, 0x8, 0x1, 0x3, 0x3, 0x9, 0xaa77, 0x2494, 0x4, 0x0, 0x4, 0x5, 0x1d, 0x40, 0x8, 0x1b, 0xfffffff7, 0x81, 0x0, 0x7, 0x1, 0xfff, 0xf0, 0x81, 0x3, 0x1, 0x7, 0x17, 0x80, 0x0, 0x5, 0x8, 0x1, 0x0, 0x4, 0x20, 0xcbbf, 0x2016, 0x5, 0x1, 0xb288, 0x5, 0x9, 0x5, 0x6, 0xffff, 0xcd19, 0x3ff, 0x2, 0x3, 0x5, 0x3f, 0x1, 0x7, 0x81, 0x6, 0x3, 0xffffffff, 0x8, 0xbe, 0xfffffffb, 0x5, 0x0, 0x3, 0x8, 0x2, 0x1f, 0xfba3, 0x3, 0x8000, 0xffff, 0x6, 0x1, 0x1, 0x6a92b8cf, 0x2, 0x8, 0x5, 0xa316, 0x3, 0x3, 0x9, 0x101, 0xfffffffe, 0x8000, 0x0, 0x1, 0x9, 0x4, 0x80, 0xfff, 0x67d5, 0x73e7, 0x0, 0x0, 0x200, 0x4, 0x3, 0x7, 0xffffffff, 0x9, 0x3, 0x1, 0x3, 0x7, 0x4, 0xd097, 0x7, 0x2, 0x3, 0x0, 0x5, 0x2, 0x6, 0x4, 0x2, 0x81, 0x7, 0x101, 0x1, 0x6, 0x7, 0x10001, 0x1b, 0x0, 0xffff8001, 0x7ff, 0x4, 0x32, 0x7fcf, 0x8000, 0x2ed, 0xe1, 0x3, 0x9, 0x5, 0x1000, 0x8338, 0x2, 0x1f, 0xe7cf, 0x0, 0x5, 0x8, 0x3, 0x8000, 0xfff, 0x10000, 0x7fffffff, 0x0, 0x80000000, 0x8, 0x10001, 0x5, 0x5, 0xda, 0x689, 0x7, 0x3, 0x8, 0xfffffffc, 0x0, 0x3, 0x4, 0xff, 0x0, 0x81, 0x0, 0x2, 0x6, 0x1, 0x738, 0x7daf, 0x8, 0xffff, 0x80, 0x0, 0x3, 0x401, 0x1, 0x4, 0x2, 0x5, 0xc27, 0x1000, 0x869d, 0x80000000, 0x3, 0x0, 0x10000000, 0x0, 0x7, 0x8cf, 0x4, 0x2, 0x3, 0xfffffffb, 0x4ea7, 0xb6c, 0x8000, 0xffff, 0x7f, 0x4, 0x0, 0xffffffc0, 0xfffffffe, 0xfff, 0x3, 0x4e65, 0x1, 0xfff, 0x8, 0x3f, 0x1ff, 0xff, 0x7fff, 0xfd, 0xc0, 0x9c67, 0x6, 0x8, 0x8, 0x8000, 0x5, 0xffffffff, 0x8000, 0xffff8001, 0x4, 0x7, 0x9, 0x1, 0x5, 0x3, 0x1, 0x6, 0x80000000, 0x1, 0x9, 0x4, 0x1c00000, 0xf8c0, 0x3, 0x9, 0x200, 0x20, 0x10001, 0x7, 0xfffffff8, 0x8, 0xffffffff, 0x4, 0x4, 0x6, 0x7, 0xfff, 0x94, 0xffffffff, 0x7, 0x401, 0x7, 0x2, 0x8, 0x8, 0x1, 0x8, 0x2, 0x3, 0xfffffffa, 0x5, 0x472679ed, 0x1f, 0xfffffffb, 0x4d, 0x9e, 0x9, 0x8, 0x9, 0x40, 0x4, 0x0, 0x0, 0x1, 0x5, 0x7, 0x6, 0x8, 0x8001, 0x3, 0x20, 0x7ff, 0x8, 0xab3, 0x0, 0x400, 0x266, 0x5285, 0x9, 0x1, 0x8, 0x8d29, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x6, 0x6, 0x81, 0x5f6, 0x9, 0x10000, 0xfffff800, 0x2, 0xb30, 0x8000, 0x8, 0x7de, 0x3bd4, 0xfff, 0xffffffc0, 0x3, 0x3, 0x8, 0x2, 0xdc, 0x6, 0x1, 0x3, 0x8, 0x4, 0x4, 0x6, 0x1f, 0xffffff0a, 0x0, 0x1ff, 0x6, 0x2, 0xffff, 0x0, 0xa42, 0x81, 0x5, 0x100, 0x7f, 0xc46, 0x5, 0xf510, 0x7ff, 0x0, 0x3, 0x6, 0x1, 0x1, 0x20, 0x4, 0x5, 0x80, 0x7f, 0x2, 0x2, 0x4, 0x0, 0xd181, 0x0, 0x800, 0x7ff, 0x7, 0x9, 0x1, 0x7f, 0xffffffff, 0x1, 0x7, 0x4, 0x80000000, 0x1, 0xa03f, 0x7, 0x0, 0x100, 0x7f, 0x3f, 0xffff, 0x101, 0x7, 0x80000000, 0xc518, 0x8, 0x5, 0x5, 0xfff, 0x5, 0x35401dd6, 0x1, 0x80000000, 0x6, 0xb129, 0x3ff, 0x9, 0x9, 0x9e3, 0x0, 0xfe36, 0xac03, 0xff, 0x62c, 0x4, 0xffff, 0x20, 0x1, 0xffff, 0x9, 0x8, 0x81, 0x1000, 0x752, 0x4, 0x3, 0x7fff, 0x3, 0x40000000, 0x200, 0x2, 0x8001, 0x0, 0x8001, 0x8, 0xfff, 0x86, 0x100, 0x7, 0x0, 0xffffffda, 0x0, 0x63a, 0x2, 0x7c3a4a2d, 0x7fff, 0x5, 0x7fff, 0x6, 0x7, 0x8, 0x101, 0x5, 0x6, 0x401, 0x3, 0x80000001, 0xfff, 0x41ff378e, 0x5, 0x1, 0x0, 0x9, 0x1, 0x200, 0x2, 0x4, 0x5, 0xc45, 0x3f, 0x80, 0x6, 0x0, 0x4, 0x9, 0x81, 0x9, 0x1, 0x0, 0x447f, 0x5, 0x5, 0x80000001, 0x8, 0x5, 0x1, 0x9, 0x6ebc, 0x0, 0x9, 0x20, 0x28c, 0xfc, 0x42000000, 0x6, 0x6, 0x0, 0xc68, 0x5a7a, 0x5, 0xffffff4c, 0x5, 0x3, 0x200, 0x1, 0x0, 0x2, 0x1, 0x7e8, 0x1, 0x1, 0x2, 0x7, 0xc208, 0x434c, 0xfff, 0x101, 0x0, 0x53b, 0xac, 0x2, 0x80000000, 0x101, 0x0, 0x6, 0x1, 0x1, 0x800, 0x6, 0x100, 0x0, 0x0, 0x7, 0x8, 0x9, 0x20, 0x9, 0x78, 0x5, 0x401, 0x7, 0x0, 0x595e, 0x1, 0x200, 0xa8c, 0x7000000, 0x0, 0x10000, 0x0, 0x6, 0x5, 0xc76, 0x0, 0x2c37, 0x5, 0x8, 0x400, 0x1, 0x7fe, 0x8, 0x8, 0x10000, 0x8001, 0x9, 0x9, 0x6, 0xfffffffd, 0x0, 0x3, 0x6b, 0x8, 0x80000001, 0x80000001, 0x3, 0x4, 0xebdf, 0xff]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000001180), 0x4) clock_gettime(0x0, &(0x7f0000001100)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000001000)="32724fc75b0cfeb850ab9a4009e0ec5908cf450d5181ab21abe705079c72843d39cf0c26840c49e90931fa0af3018dcceb3cc2f7145ed98b355e427b713b68f05e7ca9e555fe428813692478c38496f7e09580908a983a4ee204683bdc744f6ad20c554e3de774ad1e892871c19bd5fcf6f0e4d9e9e9c4968535c609e4bd3a2993712d9f47d827036ac897a1777ad307b0c19f69c12e7714c9cb490a85718b1eb4822ff635d858412990656447d53a7527292be48785fafb2b3450eac2beb74ee96c144adf69f4af43fd83216a565716e6d059356a47cac6", 0xd8, 0x2, &(0x7f0000001140)={r2, r3+10000000}) [ 1720.105855][ T36] audit: type=1400 audit(1615783039.950:576): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7777 comm="syz-executor.3" 04:37:20 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837303391482aab94627c806304000000139c010000800000000048"], 0x2b) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200, 0x0) 04:37:20 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x50, r0, 0x8000000) 04:37:20 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRES16], 0x3c) 04:37:20 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x5]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1720.158689][ T7799] AppArmor: change_hat: Invalid input '#' [ 1720.161224][ T36] audit: type=1400 audit(1615783040.030:577): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7796 comm="syz-executor.2" 04:37:20 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x100, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x1010, r1, 0x0) r3 = syz_io_uring_setup(0x7c65, &(0x7f0000000100)={0x0, 0x1086, 0x8, 0x3, 0x333, 0x0, r0}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) bind$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10) r4 = syz_io_uring_setup(0x2d96, &(0x7f00000002c0)={0x0, 0x42fb, 0x0, 0x0, 0x304}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r6 = syz_io_uring_complete(r2) ioctl$ASHMEM_GET_PROT_MASK(r6, 0x7706, &(0x7f0000000440)) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000200)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/udmabuf\x00', 0x2) r7 = accept(r5, &(0x7f00000004c0)=@tipc=@id, &(0x7f0000000540)=0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf2506000000080002000600000008000300070000004c0001800600010002000000060001000200000005000200ff00000014000400fe8000000000000000000000000000bb080006000700000014000400fe8000000000000000000000000000aa1800018014000400fc02000000000000000000000000000008000300040000000c000180060001000200000024000180080007"], 0xdc}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r9, 0x302, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) io_uring_setup(0x1853, &(0x7f00000003c0)={0x0, 0x124d, 0x8, 0x1, 0x26f, 0x0, r4}) 04:37:20 executing program 2: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80606dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) [ 1720.232635][ T36] audit: type=1400 audit(1615783040.100:578): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7816 comm="syz-executor.2" [ 1720.278381][ T36] audit: type=1400 audit(1615783040.110:579): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7816 comm="syz-executor.2" [ 1720.312518][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1720.329416][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:37:20 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x100000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:20 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x8]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:20 executing program 3: r0 = syz_io_uring_complete(0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000000c0)={[0x4c, 0x1000, 0x2, 0x2, 0x9, 0x4, 0x7ff, 0x4, 0x4, 0x4, 0x8, 0x3, 0x6, 0x7, 0x0, 0x4, 0x7fff, 0x4, 0x8000, 0x81, 0x1, 0x5, 0x7, 0x3, 0x3, 0x1, 0x7ff, 0xa352, 0x6, 0x45d, 0xfffffffd, 0x8000, 0x8, 0xfffffad0, 0xffffffff, 0x7fffffff, 0x1, 0x7f, 0x9, 0x800, 0x7, 0x7, 0xfffff14a, 0x9, 0x100, 0x1ff, 0x0, 0x6, 0x3, 0x0, 0xff, 0x6, 0x2, 0x9, 0x7, 0x3, 0x7, 0x3, 0x2, 0x4, 0xfffffff8, 0x7, 0x6, 0x8001, 0x1, 0xffff, 0x6, 0x40, 0x3, 0xfff, 0x7fff, 0x1, 0x0, 0x1ff, 0x5, 0x3, 0x1, 0xffb5, 0x1, 0x1000, 0x2, 0xffff0001, 0x4, 0x0, 0x6, 0x0, 0x6, 0x74, 0x184b, 0x1, 0xcf17, 0x81, 0xffff7fff, 0x73, 0x1, 0xe6d, 0x5, 0x3, 0xffffff00, 0x1000, 0xfffffff7, 0x0, 0x8, 0x3, 0x9, 0xfffffc3b, 0x3, 0x2, 0xf56, 0x7abc, 0xee, 0x0, 0x640, 0x8, 0x1, 0x0, 0x2, 0x6b, 0x1, 0x2000, 0x5, 0x1ff, 0x4, 0x1ff, 0xd54, 0x82b, 0x5, 0x9, 0x1, 0x0, 0x52a, 0x8000, 0x1, 0xb, 0x8, 0x4, 0x9, 0x1, 0x4, 0x200, 0xffff, 0x40, 0x1, 0x8000, 0x8, 0x400, 0xfffffff8, 0x7f, 0x0, 0x3, 0x6, 0xfffffff7, 0xfffffff9, 0x6, 0x0, 0x7fffffff, 0x4e77, 0x3, 0x8000, 0xff, 0x1, 0x1, 0x5, 0x10000, 0x1, 0x6, 0x2a297c7a, 0x7, 0x8, 0x9, 0xfff, 0x9, 0x2, 0x401, 0xfffffff9, 0x4, 0x7, 0x8, 0x1, 0x2, 0x5ff, 0x1, 0x3, 0x8, 0x9, 0x335, 0x100, 0x200, 0x8, 0x3, 0x56bf, 0x9, 0x4, 0x3, 0x1, 0x4, 0x9, 0x8, 0x5, 0x1, 0x6, 0x7f, 0x101, 0xffff, 0x6, 0x3, 0x7fffffff, 0x7f, 0x9ace, 0x1, 0x258, 0x5, 0x5df5, 0x101, 0x6443, 0x9, 0x2, 0x8001, 0x7, 0x7ff, 0xbf9, 0x1ff, 0x3f, 0x101, 0xe01, 0x1, 0x96, 0x1, 0x283e, 0x1, 0x5, 0xffffffff, 0x30f2, 0xd4bc, 0x29c, 0x95, 0x2, 0x6, 0x4, 0x9, 0x9, 0x20, 0x5, 0x2, 0x8, 0x8001, 0xfbd3, 0x1, 0x8, 0x1, 0x56faadda, 0x0, 0x7, 0x4, 0x6, 0x2, 0x1, 0x5, 0x9, 0x8, 0x980, 0x10000, 0x9, 0x2, 0x0, 0x5, 0x1ff, 0x10000, 0x5, 0x0, 0x7fffffff, 0xfff, 0x0, 0x80000001, 0xfff, 0x7, 0x1ff, 0x0, 0x4, 0x8, 0x560, 0x2, 0x3, 0x5, 0xd51, 0x0, 0x4, 0x3, 0x1, 0x2, 0x2, 0x100, 0xffffffff, 0x400, 0x7, 0x2, 0x8, 0x4, 0xc8e, 0xfe000000, 0x4, 0x9db9, 0x7, 0x2de8, 0x8, 0x3ff, 0xf2, 0x71a, 0xfffff167, 0x4, 0x0, 0x7f, 0x8, 0x7ff, 0x6, 0x6, 0x7, 0x0, 0x4, 0x8, 0xfff, 0xdf1, 0x40, 0x8, 0x1ff, 0x1, 0x9f, 0x7, 0x641f, 0x5, 0x3, 0x16, 0x8000, 0x7, 0x7, 0x3, 0x1, 0xfffffff8, 0x3f, 0xb562, 0x2, 0x2, 0x8, 0xad, 0x3, 0x0, 0x1, 0x2, 0x4a51b4fd, 0x3f, 0x6, 0x46d8a3e4, 0x5, 0x80000000, 0x9, 0xf, 0x1f, 0x401, 0x3, 0xff, 0x0, 0x5b58, 0x2, 0x2, 0x8000, 0x916, 0x200, 0xe02, 0x9, 0xddde, 0x1ff, 0x20, 0x625, 0x1, 0x3, 0xb18, 0x9, 0x72, 0xffff, 0x5, 0x7f, 0x7ff, 0x3f, 0x6, 0x1d3, 0x346, 0x40, 0x8, 0x7fffffff, 0x2, 0xb31, 0x1, 0x7, 0x1, 0x0, 0xfffffffa, 0x9, 0xfc, 0x4, 0xff, 0x100, 0x2, 0x4, 0x1, 0x4, 0x7ff, 0x97, 0x9, 0x0, 0x6, 0xd60, 0x3, 0x0, 0x0, 0x8e, 0x1, 0xfffffff7, 0x81, 0x40, 0x7, 0x9, 0x0, 0x1ff, 0x8, 0x101, 0x2, 0x2, 0x6, 0x5, 0x95, 0x2, 0x2, 0x1000, 0x5, 0x5, 0x7ff, 0xdc4c, 0x3, 0x5, 0xffffffff, 0x3, 0x4, 0x0, 0x8, 0x55, 0x9, 0xb584, 0x7, 0x6, 0x2, 0x8000, 0x6bac, 0x91, 0xffffffff, 0x9, 0x4, 0x1f, 0x101, 0x81, 0x5, 0x20, 0x0, 0x85a, 0x2, 0x9, 0x8, 0xe605, 0x7, 0x3ff, 0x0, 0x4, 0x5, 0x4, 0x12, 0x5, 0x100, 0xffffffaf, 0xa25, 0x7, 0x7, 0x2, 0x4, 0xffff7f1f, 0x3ff, 0x7fffffff, 0x8, 0x8001, 0x0, 0x8, 0x10001, 0x7, 0x710, 0x6, 0xfffffe00, 0x7f, 0x1, 0x80, 0x78a1, 0x9, 0x9, 0x80000000, 0x40, 0x9, 0x6, 0x2, 0xd3d, 0xd609, 0x1000, 0x6, 0x3, 0x7d1a, 0x3ff, 0x8, 0x0, 0x2, 0x1ff, 0x5, 0x4, 0x3, 0x2, 0x2, 0x1, 0xfffffffe, 0x0, 0x7, 0x7, 0x10000, 0x6, 0x1, 0x2, 0x2400, 0x6, 0x0, 0x5bae8, 0x7d8c187a, 0x4, 0x63a, 0x200, 0x97, 0x2, 0x0, 0x5, 0x4, 0x1, 0x2, 0x1, 0x2, 0x46e3, 0x1f, 0x39544778, 0x3, 0x280000, 0x3, 0x0, 0x8db8, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x2, 0x10000, 0xffffffff, 0x0, 0x21, 0x1ff, 0x8001, 0xff, 0x6, 0x10001, 0x9, 0x40, 0x2, 0x7, 0xbe05, 0x21158514, 0x783, 0x7, 0x40, 0xffffffff, 0x8, 0x7, 0xc230, 0x0, 0x1000, 0x3, 0x6, 0xff, 0x43, 0x9, 0x44f, 0xc1, 0x9, 0xe4, 0x7fffffff, 0x81, 0x4, 0x9, 0xad5, 0x1000, 0x10000, 0x2, 0xff, 0x3, 0x0, 0x1, 0x5, 0x58a, 0x1dda, 0x4, 0xf6c, 0x7, 0x3f, 0x7ff, 0x1, 0x2, 0x5, 0x6, 0x100, 0x6, 0x3, 0xeeaa, 0x7fff, 0x1, 0x81, 0x0, 0xda, 0x8e6, 0x40, 0x6, 0x6, 0x8, 0x2, 0x3, 0x4, 0x0, 0x3, 0x9, 0x12, 0x6, 0x7, 0x2c, 0x1f, 0x35, 0x400, 0x9, 0x8, 0x2, 0x4, 0x6, 0x1, 0x8001, 0x80000000, 0x2, 0xfffffff9, 0x7, 0xfffffff7, 0x3, 0x7, 0x1, 0x1ffc, 0x2, 0x5, 0xffff, 0x0, 0x2ae, 0x1593, 0x9, 0x6, 0x7fffffff, 0x80, 0x6, 0x7, 0x9, 0x0, 0xfffffd7d, 0x3, 0x23ee, 0x9, 0xff, 0x6, 0x9, 0x5, 0x0, 0xe1, 0x6, 0x81, 0x1f, 0x7f, 0xfeda, 0xfc, 0xe0, 0xffffffff, 0x5, 0x8, 0x6, 0xccd, 0x4, 0x3, 0x768, 0x6, 0x8000, 0xb29, 0x9, 0x4, 0x0, 0x8, 0x5, 0x3, 0x4, 0x9, 0xffff, 0x0, 0x1, 0xde, 0x1, 0x1, 0xbe8, 0x2, 0x2, 0x4, 0x75b6, 0x2, 0x101, 0x5, 0x6, 0x0, 0x20, 0x6, 0x9, 0x2, 0x4, 0x3, 0x748, 0xfffffffa, 0x101, 0xfffffff8, 0x9, 0x8c, 0x9, 0x4, 0x6, 0x4, 0x1, 0x8, 0x6, 0x1, 0x6, 0x2, 0xdcac, 0x7, 0xffffff01, 0x5, 0x800, 0x3f, 0x4, 0x101, 0x7, 0x7fffffff, 0x400, 0x5, 0x4, 0x2, 0xb2, 0x6, 0x0, 0x100, 0x0, 0x1, 0x97, 0x2, 0x5, 0x80000001, 0x5, 0x6, 0xd1da, 0x80, 0x5, 0x4, 0x0, 0xd6c8, 0x40, 0xff, 0x1a, 0x40, 0x5, 0x3, 0xa30, 0x7f, 0x8, 0x0, 0xfffffffa, 0xb666, 0x6, 0x5, 0x6, 0x40, 0x2, 0x76c000, 0x3, 0x5, 0x400, 0x5, 0x0, 0x2, 0x86c, 0xfffffffa, 0x6, 0xa93, 0x80000001, 0x3, 0x3d, 0x7, 0x9, 0x1, 0xa708, 0x200, 0xffff, 0x2, 0x1f, 0x5, 0x9, 0x10000, 0x4, 0x9c, 0x4, 0x3ff, 0x5, 0x1, 0x3, 0xfff, 0x4, 0xfc5, 0x10001, 0x821, 0x9, 0x751, 0xd7b, 0x800, 0x8, 0x1, 0x8, 0x2, 0x1ff, 0x7fffffff, 0x100, 0x3, 0x6229, 0x200, 0x6b1, 0x6, 0x3, 0x3, 0x1dd, 0x2c5da00c, 0xffffff81, 0x4, 0x6, 0x5, 0x3, 0xff, 0x0, 0x3ff, 0xbd6e, 0x7ff, 0x7, 0x1f, 0x180000, 0x800, 0xadf, 0x800, 0x80000001, 0x8, 0x7fffffff, 0x3, 0x3, 0x6, 0x10000, 0x660, 0x200, 0x2, 0xfd32, 0xbe4, 0x3, 0xa0ed, 0x6, 0xff, 0xc8b, 0x5, 0x95a3, 0x7f, 0x5, 0x5, 0x8e13fa8, 0x8, 0x3, 0x2, 0xffffffff, 0x7, 0x0, 0xccdc, 0xdbf, 0x8, 0x5, 0x1, 0xfffffff9, 0x5, 0x4, 0x2, 0x3, 0x60, 0x8, 0x7ff, 0x4, 0x20, 0x7, 0x1788, 0x40, 0x101, 0x1, 0x3, 0x5, 0x5, 0x1000, 0x4, 0x100, 0xfff, 0x800000, 0x3, 0x4, 0x2, 0x1000, 0x6, 0xe2bc, 0x5, 0xa0, 0x80, 0x9, 0x10000, 0x10000, 0x4, 0x1ff, 0x7, 0x7c, 0x3, 0x8, 0x7, 0x1, 0xff, 0x1, 0x0, 0x6, 0x22c6, 0xb4, 0x122, 0x27, 0x4, 0x7, 0x5c70, 0x8, 0x5, 0x3a, 0x6, 0xfb, 0x8, 0x4, 0xfff, 0x2, 0x0, 0x8, 0xffffff3f, 0x8, 0x3370, 0x2, 0x1, 0x5ace, 0x9c5, 0x101, 0x2, 0x7f, 0x10000, 0x22440d28, 0x80, 0x7fff, 0x7f, 0x9, 0xffff, 0x80000001, 0xffff, 0x6ade, 0x8, 0x2, 0x6, 0x3, 0x15ff, 0x200, 0x6, 0x1d667701, 0x1ea3, 0x2, 0x0, 0x9, 0x658, 0x800, 0x6, 0xffff, 0xffff56c4, 0x79, 0x1f, 0x800, 0x44, 0x4, 0x3, 0x8, 0x8001, 0xde13320, 0x7, 0xffff0001, 0x27, 0x9, 0x3f, 0x6, 0x9, 0x1]}) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:20 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xc07e}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:20 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae4821d00bd7a6c94e392e0277"], 0x2b) 04:37:20 executing program 0: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:20 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x10]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:20 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socketpair(0x8, 0xa, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000240)=0xe47, 0x2) accept(r1, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00', r3) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4001) sendmsg$AUDIT_USER(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200402}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xfc, 0x3ed, 0x101, 0x70bd29, 0x25dfdbfe, "6ddf4a713bd38b40da4f40cec9e8c2d1fcacc16602e296a01b715205fdc9eedd1f22e4ab34a1b80cb653fa41d3350e06ce0d547a8d17416c4e373942e86986b86adf397e8d62d29623c6a03e735a0c76bcd1bb1914630516e375817fc76a9195f9852562c38d9438a5ae57d61b9a3ee47a7fc996da157d3c6571b3a30bddb4190cd58e5297fdb5218eb5cecb7df8a02d46e07c54d494a476ed7e58d26eea40e0ce04b643645327a55ab146c03b5038e8a91ad38a1c9f354303d6f59d65873d79d3bd335e586b64025335a66c6f6e3e55d393be10423e9515c255c6330c25ae7acd6d88ab8adb391b6b", ["", "", "", ""]}, 0xfc}, 0x1, 0x0, 0x0, 0x6}, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="9a583abac9197f77df8e7a3c8c405e49248ec702dff7a15f9a019e644a364995cd2bf642d53c195cfa5f50242f05682a1c737ef19ae51cf6dbc5d31895e51620b5feac43c0dd9194847593f2b82b840ae6c4213fdbfdf580379e03317e32e9197c541239d29c238cd97b71432ff67250501d8bf4d6c18b703816b17f43ebfdf7b2480ade504598c40a097c605b1d00ad198109e9afa4f92dc0c772e4fecf4cc61797e66d42437c6aab78d381e7d5385aa8e66e28db13f087342d38", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="9f022f6370524ec5cd8bc01a62e93b7a02a552447a249e12b9b08420c471777690013860470775996da2e92db83ee0bcdb21d9d8dc700b03a37bbda38580234c7f6f2d6f3f87149c", @ANYBLOB="f142f93651a555817fade38b47cc8fb3f92b53ffef3016d353f828152b2fbb06b67be6e41f8f7ff7d6d3d10e8a11625ed421ce4c0244b5cfd49faef63cbeca5b494315b4aa2b71cb95bd511956b27dea9f38b6e23bc70c686cc148e7ed1693b8167ea0bac13e909fc614ce84b9c7eee26eb79ec9b01a66c2ed58ca8ae221c0f565d2bea22f", @ANYRES16=r0], 0x3c) 04:37:20 executing program 0: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x0, 0x161, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x114, &(0x7f0000000100)=0x3, 0x0, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x2, 0x3, 0x9, 0x0, 0x1, 0x3800}, @mpls={[{0x8, 0x0, 0x1}, {}, {0x4, 0x0, 0x1}], @generic="7e097eafa2fa5e62ec2256a7b8dc665a2f5ff474823d8c4a91f2416e5933506f86333fdc4e48ac358a008f386e4b30bf7ec18d5385db4e32df3b7a036cb0dae99e2ab48c0163ff032c2dd0260e3821da2580cc617383894d9a823a8775c84e8c952a9e6c6845a8c20e197d2ba5ac0df0f13eca43c7dbd261b01a97551188991a2eaa"}}, 0x98) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x1a9f80, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x6, 0x0, 0x4, 0x1, 0x1}, 0x101) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000240)='|j2\xb4\xa2\xc98\a3[\x94\xac\x00'/31) 04:37:20 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x3c) socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) socketpair(0x22, 0x5, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x424, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfd, {0x2, 0x2, 0xe, [0x5, 0x1, 0xfffffffd, 0x4, 0x40, 0x8, 0x5, 0xfffffd6d, 0x82, 0x2c, 0x8ad3, 0x2, 0x10001, 0x0, 0x401, 0x8000, 0x2, 0x5, 0x200, 0x20, 0x3, 0x5, 0x80000001, 0x85, 0x744cd41e, 0x9825, 0x7fff, 0x9, 0x80000000, 0x6, 0x7, 0x80000000, 0x98, 0x81, 0x101, 0x100, 0x2, 0x9, 0x9, 0x8001, 0x7fffffff, 0x0, 0x25, 0xffffff80, 0x5, 0x3f, 0x7fffffff, 0x1, 0x1f, 0x800, 0x7, 0x80000000, 0x3, 0x7, 0x8, 0x3f, 0x4, 0x2, 0x0, 0x92c0, 0x7, 0x1edd, 0x4, 0x4], [0x1, 0x1, 0x101, 0x5, 0x38ad, 0x1, 0xff, 0x1, 0x4, 0x80, 0x7, 0x0, 0x200, 0x7, 0x6, 0x8, 0x3, 0xff, 0x1, 0x1, 0x1, 0x3, 0x5879, 0x9, 0x81, 0x1, 0x4, 0x5, 0x9, 0xffff, 0x1, 0x10000, 0xfa1, 0x5, 0x1, 0xfffffffc, 0x40, 0x5, 0x7fff, 0xfffffffc, 0x1, 0x4, 0x0, 0x5, 0x3, 0x0, 0x10000, 0x8001, 0x4, 0x0, 0x6, 0x1ff, 0x2, 0x9, 0xffffffff, 0x40, 0x5a, 0x1, 0x157, 0x6, 0x5, 0x6, 0x1, 0x4], [0x7, 0x44c, 0x4084, 0x47, 0x9, 0x1, 0x31600, 0x2, 0x2, 0x7ff, 0x2, 0x2, 0x4ce, 0x7ff, 0x99, 0x100, 0x7, 0x6, 0x9, 0x10000, 0x4, 0x100, 0x3, 0x4, 0x9, 0x6, 0x0, 0x3, 0x8, 0x4, 0x869, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x8, 0xffffff54, 0x6, 0x3, 0x4, 0x1, 0x4, 0xe2e, 0x2213, 0x0, 0x7, 0x8, 0xfffffff7, 0x1, 0x7ff, 0xffffffff, 0x3, 0xffff, 0x6, 0x80000000, 0x1f, 0x80, 0x101, 0x7e5f, 0x9ca, 0x4, 0x15d], [0x6, 0x0, 0x1, 0x64a, 0x0, 0x0, 0x3, 0x2, 0x5, 0x10001, 0x0, 0xd1, 0x7, 0x2, 0x1, 0x3, 0x1, 0x7785, 0xffff, 0x1, 0xfffffff8, 0x9, 0x3, 0x9, 0x0, 0x5, 0x2, 0xfffffffb, 0x8000, 0x7, 0x4d, 0xfffffffe, 0x3, 0x9, 0x40, 0x8, 0x2, 0x1fffe, 0x3, 0xbf5, 0x7fff, 0x5, 0x81, 0x0, 0x4, 0x8, 0x7, 0x9, 0x8, 0x4, 0x2, 0x80000001, 0x3, 0x0, 0x0, 0x80000001, 0x3, 0x8dfd, 0x8, 0x474, 0x1, 0x10000, 0x4, 0x9], 0x3, ['ah\x00']}, ["", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x84}, 0x40800) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000100)=0x4c) 04:37:20 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x333, 0x2) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000080)) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a8c3a4bd179e280b1e6dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:20 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x200000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1721.029484][ T36] audit: type=1400 audit(1615783040.900:580): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7846 comm="syz-executor.2" 04:37:21 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$tun(r1, &(0x7f0000000080)={@void, @void, @ipv4=@dccp={{0x41, 0x4, 0x2, 0x0, 0x123, 0x66, 0x0, 0x8, 0x21, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x54, 0x41, 0x3, 0x2, [{@local, 0x6}, {@private=0xa010102, 0x4a2b}, {@private=0xa010101, 0x6}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x1}, {@loopback, 0x7f}, {@broadcast, 0x9}, {@multicast2, 0x2be}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x40}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x49, 0x0, 0x4, [0x9, 0x36400000, 0x4, 0x3, 0xfffff981, 0x80000000, 0x59]}, @timestamp_addr={0x44, 0x2c, 0xe3, 0x1, 0xc, [{@multicast1, 0x4d6}, {@local, 0x1000}, {@multicast1, 0x8}, {@local, 0x6}, {@empty, 0x2}]}, @timestamp_addr={0x44, 0x24, 0x22, 0x1, 0x1, [{@empty}, {@remote, 0x7}, {@multicast1, 0x2}, {@private=0xa010100, 0x20}]}, @ssrr={0x89, 0xf, 0xe, [@rand_addr=0x64010100, @multicast1, @empty]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x1}, @rr={0x7, 0xf, 0x35, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e23, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x5, 0x3, "4f9597", 0x5, "16220f"}, "d5a1fe2ffa5056df380bb65742558f"}}}, 0x123) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a3850100008000000000ab2e0277"], 0x2b) 04:37:21 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x6) 04:37:21 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x18]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1721.114056][ T36] audit: type=1400 audit(1615783040.990:581): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7864 comm="syz-executor.2" 04:37:21 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x40000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:21 executing program 0: ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x1, 0x19c, 0x0, r0, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000100)) [ 1721.161111][ T36] audit: type=1400 audit(1615783041.030:582): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7870 comm="syz-executor.2" 04:37:21 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="006540d065d24395330d70726f66698265202ff830a837343391482a80636dc182d1bcd760fa9887000000dff3805d76f4e1cdec6e936ab19be4b49ef72e4d5fd6a09a16bd3d71078dd6"], 0x2b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000000)={{&(0x7f0000000440)={'KERNEL\x00', {&(0x7f0000000140)=@adf_hex={@normal='NumberDcInstances\x00', {0x28}, {&(0x7f0000000080)=@adf_dec={@normal='NumberCyInstances\x00', {0x8}}}}}, {&(0x7f0000000200)={'GENERAL\x00', {&(0x7f0000000380)=@adf_dec={@format={'Cy', '5', 'RingSymTx\x00'}, {0x2}, {&(0x7f00000002c0)=@adf_str={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {"e4bd83cf7a9f6c77139d0c8b978196119137a703bc6e1ae3fb58a3943d195ecd600f1755a666ee4c508cd06620315575881d2eb453b707b47b4304860ff5a8ce"}}}}}}}}}, 0x62}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) socketpair(0x28, 0xa, 0x4, &(0x7f0000000280)={0xffffffffffffffff}) accept4$ax25(r3, &(0x7f0000000600)={{0x3, @default}, [@netrom, @null, @bcast, @bcast, @default, @default, @netrom, @netrom]}, &(0x7f00000005c0)=0x48, 0xc00) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 04:37:21 executing program 3: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4661fa0d, 0x0) syz_io_uring_setup(0x2eb5, &(0x7f0000000000)={0x0, 0x10e, 0x20, 0x0, 0x210, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[], 0x3c) 04:37:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xc10000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:21 executing program 2: sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x300, 0x70bd2a, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x80) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48c, 0x3f4, 0x200, 0x70bd25, 0x25dfdbff, {0x1, 0x1, 0x26, [0x3, 0x7000, 0x8001, 0x570a9a54, 0xe35c, 0x1000, 0xff, 0x879d, 0x1, 0x2, 0x401, 0x5, 0xffffffff, 0x7fffffff, 0x200, 0x8, 0x4cf0, 0x1f, 0x9eeb, 0x4, 0x7, 0x9f, 0x0, 0x8, 0x1000, 0x85, 0xfff, 0x5142, 0x10001, 0x9, 0x9, 0x7ff, 0x7, 0xfc, 0x2, 0x7, 0x5, 0xb92, 0xb7d9, 0x8, 0x0, 0x4, 0x3, 0xaf, 0x800, 0x18000000, 0x0, 0x29, 0x5, 0x2, 0x7ff, 0xc18c, 0x6, 0x0, 0x3ff, 0x3f, 0x2, 0x506, 0x0, 0xfff, 0x8, 0x8, 0x8, 0x2], [0x401, 0xffffffff, 0x4, 0x54e33e5b, 0x6, 0x7ff, 0x0, 0x9, 0xac6, 0x6bc6, 0x10000, 0xffff, 0x3, 0x3, 0xdec, 0x3, 0x0, 0x7, 0x0, 0x1ff, 0x1, 0xffff, 0x8, 0x5, 0x80000001, 0x80000000, 0x7, 0x1f, 0x1f, 0x200, 0x9, 0x7fff, 0x8001, 0xffff7fff, 0x7, 0x6, 0x449a, 0x6, 0x4, 0x80000000, 0xffff, 0x3, 0x3f, 0x3, 0x5, 0x4, 0xf759, 0x80, 0x1, 0x101, 0x8001, 0x9, 0x5, 0x5, 0x5063, 0x3ff, 0x401, 0x2ea, 0x9, 0x10, 0x101, 0x0, 0x7ff, 0x80000001], [0x4, 0xfff, 0x1ff, 0x3a6f, 0x5, 0x4, 0x3, 0x0, 0x80000000, 0xc, 0x9, 0x2, 0x1000, 0x7fff, 0x5, 0x7fffffff, 0x8, 0x8, 0x8, 0x20, 0x9, 0x6, 0x6, 0x0, 0x1000, 0xba6, 0x71ca, 0x0, 0x11, 0x1, 0x13b4, 0x9, 0x7fff, 0x800, 0x101, 0x0, 0x2, 0xfffffff8, 0x3, 0x10001, 0x2, 0x7, 0x80, 0x800, 0x4, 0x7f, 0x6, 0x1, 0x3bcc, 0x3f, 0x2, 0xffffff01, 0x10000, 0x5, 0x1, 0x0, 0x7, 0x3, 0xc343, 0xa65, 0x8, 0x7, 0x3, 0x1f], [0x9, 0x8, 0x7, 0x100, 0x9, 0x0, 0x1, 0x3fa0, 0x5, 0x6, 0x32fe, 0x101, 0x8, 0x6, 0x1ff, 0x8, 0x3, 0xff, 0x5, 0x9, 0x3, 0x2, 0x9, 0x6, 0x2, 0x6, 0xffffffff, 0x4, 0x1, 0x22c, 0x2, 0x0, 0xe34b, 0xfffffff9, 0x9, 0x8, 0x43b, 0x5, 0x2, 0xfffffe01, 0xffffffff, 0x4, 0x7, 0x5b6, 0x3, 0x4, 0xf6, 0xffffffff, 0x7, 0xfffffffb, 0x3, 0x5b6a, 0x2, 0x100, 0x8d, 0x5, 0xfff, 0x4, 0xa597, 0x6, 0xde, 0x7fffffff, 0x8, 0x7e], 0x6c, ['/proc/thread-self/attr/current\x00', '(*!$\']+\'$\'-*/\x1a\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00']}, ["", "", "", "", "", "", ""]}, 0x48c}}, 0x8040) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="70658a1d705fab5711f7050ffff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/188, 0xbc, 0xfffffffffffffff8, 0x0) 04:37:21 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1e]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:21 executing program 0: syz_io_uring_setup(0x76be, &(0x7f0000000100)={0x0, 0x23e4, 0x0, 0x1, 0x32c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x5, 0x7, 0x0, 0x6, 0x0, 0x1}, 0xffff7fff) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:21 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='cha\x00\x00\x00\x00at #'], 0x3c) 04:37:21 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x24]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:21 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x424, 0x3f4, 0x808, 0x70bd2d, 0x25dfdbfd, {0x0, 0x1, 0x20, [0x6, 0x1, 0x7f, 0xf8fe, 0x8, 0x6, 0x3, 0x8, 0xffffff10, 0x101, 0x1a9, 0x80000000, 0x0, 0x5, 0xf4, 0x400, 0x1, 0x2, 0xfffffffa, 0x1f, 0x101, 0x401, 0x7, 0x3, 0x47cd, 0x4, 0xfff, 0x0, 0x100, 0x0, 0x0, 0xc78, 0x0, 0x6, 0x9, 0x10000, 0x6, 0x7, 0xb614, 0x5, 0xf5bc, 0x2, 0x401, 0xf3a, 0xfffffbff, 0x3, 0x80000000, 0xffff, 0x100, 0x3f, 0x6, 0x5, 0xcde0, 0x5, 0x3, 0x3, 0x5, 0x7, 0x80, 0x8, 0x0, 0x4, 0x8000, 0x800], [0xe90, 0x2, 0x8, 0x9, 0xfffffffa, 0xfd2b, 0x101, 0x1, 0xfff, 0x2, 0x0, 0x2, 0x7f, 0x2, 0x7, 0x7, 0xda9, 0x40000000, 0x3, 0x2f, 0x5, 0x20, 0x42, 0x5, 0x4, 0x4, 0x1f, 0x8001, 0x0, 0x9, 0x7fffffff, 0x42c1, 0x2, 0x80000001, 0xff, 0xffffffb9, 0x7, 0x1, 0x3f, 0x10001, 0x4, 0x8, 0x4, 0x5, 0x8, 0x78, 0x8, 0x1f, 0x46, 0x0, 0xb57e, 0x0, 0x10000, 0x600, 0x7fffffff, 0x9, 0x6, 0x3, 0x7, 0x0, 0x297e3114, 0x94, 0x6, 0x4db], [0x10000, 0x7ff, 0x0, 0xe11a, 0xe38d, 0x0, 0x6, 0xffff3be9, 0x2f28, 0x8001, 0x100, 0x2, 0x40, 0x2, 0x7, 0x4, 0x81, 0x5, 0xffffffff, 0x3, 0xe59, 0x8, 0xba07, 0x8, 0x0, 0x9, 0x3, 0x2, 0x0, 0x7fffffff, 0x4, 0x1, 0x7ff, 0x2, 0x1, 0x101, 0x74, 0x88dd, 0x80, 0x3, 0x5, 0xc9f, 0xfff, 0x81, 0x7fff, 0x5, 0x6, 0xfffffffb, 0x400, 0x0, 0xfff, 0x6, 0x3, 0x4, 0x8, 0x3, 0x1, 0x1, 0x8000, 0x0, 0x0, 0x8000, 0x77, 0x6], [0x0, 0x4, 0xc489, 0x80, 0x400, 0x1f, 0x40, 0x10001, 0x1000, 0x4, 0xe8, 0xfffffffd, 0x8da, 0xe30, 0x9, 0x6, 0x81, 0x3, 0x2, 0xffffffff, 0x7f, 0x0, 0x2, 0x7d34, 0x5, 0xb8, 0x1700, 0x35, 0x5, 0x9, 0x200, 0x7, 0x6, 0x401, 0x0, 0x0, 0x6, 0x10001, 0x46, 0xbb, 0x2, 0xf8f4, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x7, 0x2, 0xfffff50a, 0x100, 0x8, 0x2, 0x7, 0x2, 0x7, 0x2, 0x2, 0x783, 0x9, 0x2, 0x4, 0x6, 0x2], 0x4, ['}^%\x00']}, ["", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) 04:37:21 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @remote}, &(0x7f00000000c0)=0xc) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="b1bb407e6f5210adaa179731572343dd1af74e0b880208b2e2", @ANYRESHEX=r2, @ANYRES16=r2, @ANYRES16=r3, @ANYRES64, @ANYBLOB="d7546da29575faaca1ef7d2d7fb2551bb605f2e1811243dcabb2268fadc6793fdb6595512badd92749184a4d23015806c4a5dcfdafec90a4b1fd17c74c5d55167ce1b2533f5f1c973f8dad5e552aa279750cbb1277cf6fe64efe8196902422b8124e26c4b0816900615ede1b2d7c2d7437942205b32f4ec3", @ANYRESDEC=r6], 0x2b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:21 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x5473, 0x10, 0x402, 0x2db, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 04:37:21 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2a]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x3400000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:21 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x100000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:21 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x800, 0x70bd2d, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x20000080) write$apparmor_current(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:21 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x9, &(0x7f00000000c0)=0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:22 executing program 0: syz_io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:22 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x30]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1722.114680][ T7939] split_token_from_name: 3 callbacks suppressed 04:37:22 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf2506000000080002000600000008000300070000004c0001800600010002000000060001000200000005000200ff00000014000400fe8000000000000000000000000000bb080006000700000014000400fe8000000000000000000000000000aa1800018014000400fc02000000000000000000000000000008000300040000000c000180060001000200000024000180080007"], 0xdc}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000821) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[], 0xe) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = syz_io_uring_complete(0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[], 0x3c) 04:37:22 executing program 0: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x69}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240400d0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000140), 0x1000000, &(0x7f00000001c0)) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000100)={0x37, "9f5b002bb19b2637e9e7abfee2b0b6ac8f2afe9acf6cbe7944480b85b235f22dc880fdfb7b8e2e4198ff3f1f4076c85952679442e6a628"}) 04:37:22 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x8000000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:22 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xca9a3b}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x2b) 04:37:22 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x36]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:22 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000300), 0x0, 0x4) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/85, 0x55}], 0x1, &(0x7f0000000240)=""/2, 0x2}, 0x0, 0x40002000, 0x1}, 0x3) 04:37:22 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400400, 0x0) pidfd_getfd(r1, r0, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="896c616e67656875932022da68f390026c7c135f0534ead343e2d697ef108b86224534aa3d629ac8ad56d4163c7f4f2dbb60738282bcdd34e2adf3ea03fc68fc9f095b12ab06000000000000dae646610a700983657e312bd71210846a56e53a77f03c517305ebe55272c1217570b919cb620c715c8abb4147a6000000"], 0x3c) [ 1722.114691][ T7939] AppArmor: change_hat: Invalid input '#' [ 1722.238791][ T7961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1722.277493][ T7961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:37:22 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xc07e000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:22 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3c]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x80) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x2b) 04:37:22 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x2, 0x49000000, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="01040004000005000000000000000700000000000200d12b1aa67e7ef3e16962f82e90e87c4ff5e640f3cef02e40a0c0ac38feb10ffef8a4b6cbff15cbe753e124619bd9bb2f0fc124f6c0ffb2183be3c511bc000000"]) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:22 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xf0ff7f}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:22 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400040, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0xc0000000, 0xdc, 0x4, 0x0, 0x800, 0x81, 0x80000000}]}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x6) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x3c) 04:37:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x4010, 0xffffffffffffffff, 0x8000000) recvfrom$l2tp6(r1, &(0x7f0000000180)=""/181, 0xb5, 0x1519069762998891, 0x0, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dd760fa9887ae48ab2e027700000000000000f1c2640d6fe1957fa3ec888d34bb72d02e33d5a038246c8bd909f9d79fda27a676e97f1d89366e4e766c41481eb0b4e471151d045a0fa41d47d4438eed6a54fec4aad3f46c4b0f417d822578ac3195254067ec3fbbfa9f7bd43230627def8f6bed6e8354fd201c97e21b00d744d94eee3f1f433fe2c36718496c2b32d24ee05715da4bc5709ea19d408395b4010d70e507214bdb095f519cc56e05b6e1dd10000496005d949b16820271eb42d2400174f4334aa5500a51a3d1a20fad83b3d9156ef500"/253], 0x2b) 04:37:22 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x42]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:22 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xffffff7f00000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f6669825280636dc182d141a385bcd760fa9887ae4849e22d7f00"/43], 0x2b) 04:37:22 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b80000005304000428bd7000fbdbdf258918eef20c861e2d817a09e0a306f95bc456b8a87e552ea805e7774671af042be7efc075150c4d1fa8fe52e9cc3ff8700d936a43a455b8a61f7aa6777c81a443b9708ae04ed160f66624b2ea1ffdf4e84609b718b33eb5935dbdeb575369e90eb9eef18232e54c5f1123ac52ed84a1e4e78f4db44fab206b6867ae5b48a439e63550fc9940b70fd762e29d73a6e5c1a49931da3ad3892cb8f2491d7655937ce161ca14e1af6f824b"], 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x4000080) bind$can_j1939(r0, &(0x7f0000000000), 0x18) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) msgget$private(0x0, 0x179) connect$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) 04:37:22 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, 0x200}) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000200)=""/106) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r4 = syz_io_uring_complete(0x0) accept$ax25(r4, &(0x7f0000000100)={{0x3, @rose}, [@null, @netrom, @default, @remote, @null, @default, @default, @null]}, &(0x7f00000001c0)=0x48) waitid$P_PIDFD(0x3, r4, &(0x7f0000000080), 0x2, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x3c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf2506000000080002000600000008000300070000004c0001800600010002000000060001000200000005000200ff00000014000400fe8000000000000000000000000000bb080006000700000014000400fe8000000000000000000000000000aa1800018014000400fc02000000000000000000000000000008000300040000000c000180060001000200000024000180080007"], 0xdc}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}}, 0x0) r6 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00680020102f90780a010102ffffffff8307c7e000000200"]}) bind$ax25(r6, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 04:37:22 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x1000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726fbd5dde4ce4f65cd6a837343391482a80636dc182d141a385bcd760fa9887ae482b2e0277"], 0x2b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000100)=""/70, 0x46}) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$apparmor_current(0xffffffffffffffff, &(0x7f00000001c0)=@hat={'permhat ', 0x3, 0x5e, ['/proc/thread-self/attr/current\x00', '#@-\\$:@\'\x00', '/proc/thread-self/attr/current\x00', '/]]@.+\x00', ':\'^\x00', '/dev/autofs\x00', '/proc/thread-self/attr/current\x00']}, 0x98) 04:37:22 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x60]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:22 executing program 0: syz_io_uring_setup(0x1641, &(0x7f0000000000)={0x0, 0x9ff6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 04:37:22 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(r2, 0x35, &(0x7f0000000100)={0x31, 0x0, 0x7fffffff}, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'changehat ', 0x3, 0x5e, ['#\\:-\x00', '+\x00', '?\x00', '-\x00', '/proc/thread-self/attr/current\x00', ')-)$#\']/!.-\x00']}, 0x53) syz_io_uring_complete(0x0) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000180)) 04:37:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800400d70726f66698265242ff84fa837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277476131cfe1961c26544ee1e1e1c5745cc6ac8a64eeae4dd5f413124bd3803a1c63bccc287dcf44fbd3e14ad291812cb14fa5926266e325d75608a055f96905f2c578c34a441423"], 0x2b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:22 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='ehat :\x00\x00\x00\x00\x00'], 0x3c) 04:37:22 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x2000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:23 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:23 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x204]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:23 executing program 0: r0 = io_uring_setup(0x7a2, &(0x7f0000000100)={0x0, 0x5385, 0x8, 0x0, 0x39a}) syz_io_uring_setup(0x40aa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2d9, 0x0, r0, [0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:23 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB="873881d1aba698379a58d0ada56c2b4c0ca82aea5571212af8f268809a48f4fb8138aeb5ecbb98b73ccaad9ae7a4483803ee0f3f69d611b60a0b97ac", @ANYRES64=r2, @ANYRESHEX=r1], 0x3c) 04:37:23 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000000)={{}, 0x3f}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x503002, 0x0) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x8035}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @dev={[], 0x27}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={[], 0x1e}, @remote}}, 0x38) 04:37:23 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) memfd_create(0x0, 0x2f9f4b0160b1fd7c) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="73797a746a6c32046bb9655582018449", @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00680000102f90780a010102ffffffff8307c7e000000200"]}) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x438, 0x3f3, 0x4, 0x70bd29, 0x25dfdbfc, {0x5, 0x0, 0x1b, [0x6, 0x9, 0x0, 0x3e24, 0x4, 0x140000, 0x2, 0x2, 0x9, 0x9, 0x3, 0x6, 0x8bfe, 0x6, 0x3, 0x492d6962, 0x5b2, 0x0, 0x8001, 0x2dd5, 0x7, 0x80, 0x7, 0x7, 0x5, 0x0, 0x1, 0x1000, 0x4, 0x2, 0x8, 0x5a4, 0x40000, 0x5, 0x1afc, 0x9, 0x3, 0x0, 0x9, 0x5f, 0x100, 0x738e735e, 0xffffffe1, 0x3, 0x7f, 0x6e59, 0x2fa, 0xd0ee, 0x67, 0x8, 0xfffffff9, 0x7, 0x3, 0x8, 0x8001, 0xf66, 0x0, 0x8000, 0x9, 0x1, 0x81, 0x800, 0x3, 0x5], [0xffffffff, 0x401, 0x8001, 0xfffffffe, 0x9, 0x4, 0x8, 0x5, 0x5, 0x2f4f826a, 0xe22, 0x1, 0x6c, 0x2, 0x3, 0x2, 0x1ff, 0x7fff, 0x100, 0x6c2, 0x1d37, 0x6, 0x2, 0x10000, 0x8, 0x9, 0xc409, 0x6, 0x20, 0x800, 0x8, 0xb00000, 0x7, 0x400, 0x0, 0x56f, 0x7, 0x5, 0x55, 0x9, 0x2, 0x9, 0x1, 0x1, 0x4, 0x0, 0x1, 0xff, 0xfad, 0x80000001, 0xfffffffe, 0x10000, 0x3f, 0x5, 0x2, 0x3, 0x35a3, 0xffff8304, 0x3, 0x5, 0x20, 0x8, 0x5, 0x400], [0x6, 0x80, 0x6b, 0xffff, 0x6, 0x8, 0xf9, 0x8001, 0x3, 0x0, 0x5, 0x3, 0x5b, 0x9, 0x3, 0xfffffffd, 0x9, 0x507, 0x0, 0x40, 0x8, 0x0, 0xffffffff, 0x3, 0x9, 0x8, 0x80, 0x99d5, 0x2, 0x1000, 0x7, 0xffffffff, 0x2, 0xcab, 0xc7ae, 0x906d, 0x20, 0x3f, 0x3f, 0x8000, 0x7, 0x65, 0x80, 0x80, 0x2, 0x0, 0x3, 0x5, 0x0, 0x80000001, 0x42, 0x8000, 0x2, 0x9, 0x2, 0xfffffffc, 0x401, 0x2, 0x2, 0x6, 0xfffffff8, 0x0, 0x8db, 0x21], [0x6, 0x9, 0x9, 0x3, 0x5, 0x2, 0x1, 0x2, 0x1, 0x5, 0xffffff57, 0x1000, 0x1b33, 0x401, 0x7, 0xea, 0x4, 0x7ff, 0x6, 0x2, 0xf5d7, 0x2, 0x2, 0x3, 0x6, 0x40, 0x6, 0x9, 0x2, 0x10000, 0x8989, 0x10001, 0x8, 0x9, 0x8b, 0x1, 0x2, 0x4, 0x80000000, 0xbc55, 0x5, 0xde, 0x6, 0x8001, 0x81, 0x8000, 0x4, 0x5, 0xfffffffa, 0x40, 0x1, 0x1ff, 0xfff, 0x80, 0x80, 0x1, 0x3, 0x2, 0x1, 0x100, 0x5a, 0x10000, 0x80000000, 0x7], 0x16, ['!\xec:\\{$\x00', '/+-,&^/}^%-(\\g\x00']}, ["", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) syz_io_uring_submit(r0, r1, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x77359400}}, 0x1ff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x40010, r3, 0x0) 04:37:23 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)={0x3, 0x10000, [{0x9, 0x0, 0x4}, {0x4, 0x0, 0x40}, {0x20000000, 0x0, 0x4}]}) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:23 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x402]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:23 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10d800, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)={0x1, 0x40, [{0x5, 0x0, 0x56}]}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:23 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:23 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:23 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x34000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:23 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x56}, 0x8) r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x8000000) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_io_uring_setup(0x7fd1, &(0x7f0000000180)={0x0, 0x22db, 0x8, 0x0, 0x63}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x4000, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, r8, &(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x1, 0x400}, 0x1) clock_gettime(0x0, &(0x7f0000007180)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/229, 0xe5}, {&(0x7f0000001680)=""/90, 0x5a}, {&(0x7f0000001700)=""/53, 0x35}, {&(0x7f0000001740)=""/212, 0xd4}, {&(0x7f0000001840)=""/17, 0x11}], 0x9, &(0x7f0000001a40)=""/205, 0xcd}, 0x4}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001940)=""/144, 0x90}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x2, &(0x7f0000002b80)=""/60, 0x3c}, 0x6}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000002bc0)=""/249, 0xf9}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)=""/227, 0xe3}, {&(0x7f0000002e00)=""/250, 0xfa}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/109, 0x6d}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/44, 0x2c}, {&(0x7f0000004fc0)=""/45, 0x2d}, {&(0x7f0000005000)=""/211, 0xd3}], 0xa, &(0x7f00000051c0)=""/200, 0xc8}, 0x70c}, {{&(0x7f00000052c0)=@nfc, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005340)=""/70, 0x46}, {&(0x7f00000053c0)=""/5, 0x5}, {&(0x7f0000005400)=""/230, 0xe6}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/111, 0x6f}, {&(0x7f0000006580)=""/7, 0x7}], 0x6}, 0x1}, {{&(0x7f0000006640)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000067c0)=[{&(0x7f00000066c0)=""/7, 0x7}, {&(0x7f0000006700)=""/144, 0x90}], 0x2, &(0x7f0000006800)=""/22, 0x16}, 0x1}, {{&(0x7f0000006840)=@hci, 0x80, &(0x7f0000006a00)=[{&(0x7f00000068c0)=""/62, 0x3e}, {&(0x7f0000006900)=""/144, 0x90}, {&(0x7f00000069c0)=""/31, 0x1f}], 0x3, &(0x7f0000006a40)=""/255, 0xff}, 0x10001}, {{&(0x7f0000006b40)=@nl=@unspec, 0x80, &(0x7f0000006d40)=[{&(0x7f0000006bc0)=""/149, 0x95}, {&(0x7f0000006c80)=""/148, 0x94}], 0x2, &(0x7f0000006d80)=""/128, 0x80}, 0x748}, {{0x0, 0x0, &(0x7f0000006f00)=[{&(0x7f0000006e00)=""/249, 0xf9}], 0x1, &(0x7f0000006f40)=""/2, 0x2}, 0xfffffffb}], 0x8, 0x100, &(0x7f00000071c0)={r9, r10+60000000}) r11 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_USER(r11, &(0x7f0000007280)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000007240)={&(0x7f0000007200)={0x34, 0x3ed, 0x800, 0x70bd27, 0x25dfdbff, "b87d3ed515d667d91861110efd70602864adfc36a46bf8d8b2a2fbf80ab6a87d20499f", [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r0, 0x569f2898, {0x0, r4}, 0x7fd, 0xe, 0x1, {0x0, 0x0, r5}}, 0x0) 04:37:23 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x406]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:23 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x5, 0x0, 0x7}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:23 executing program 2: r0 = socket(0x0, 0xa, 0x5) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x7, 0x4) recvfrom$l2tp6(r0, &(0x7f0000000100)=""/243, 0xf3, 0x10080, 0x0, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="706540a8a1869a66698265202ff830a837343391482a80636dc1d8faaec88500d760fa9887ae48ab2e0277"], 0x2b) 04:37:23 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x500]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1723.523721][ T8092] AppArmor: change_hat: Invalid input '#' [ 1723.562977][ T3246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1723.575252][ T3246] ieee802154 phy1 wpan1: encryption failed: -22 04:37:23 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x3c) 04:37:23 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:23 executing program 0: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x464, 0x200, 0x70bd26, 0x25dfdbff, "5d577dba5394b93b8c525bda319e7201e02d6985481b3956e24929368fe1ea82ecbf1831d66749233a95044d3fe5527208401cc6bf97e6aa11624cfb536c772a0d77a33a829c93bf226c21194288c20a3625987b431da6a3", ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x10, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:23 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:23 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x5a64, &(0x7f0000000100)={0x0, 0xb101, 0x2, 0x2, 0xfe, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000200)=""/10, 0xa, 0x40000020, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000004, 0x1010, r1, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) r3 = syz_io_uring_setup(0x1c9b, &(0x7f00000003c0)={0x0, 0x2cc7, 0x10, 0x0, 0x77, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000a, 0x8010, r3, 0x10000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="73797a746e6c32ea0000000000000000", @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00680000102f90780a010102ffffffff8307c7e000000200"]}) sendmsg$802154_raw(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000000340)={&(0x7f00000002c0)="b196dec7e6c2aa2f22742b363b99704df714478f319e9dafefb73044a12821998a6fd10a486d806ee02c295b9c11dd34b91e38ae685bb6160cdb1c629de77118241795dd7470886504770cce3e9f19f70566a3b43df2fe5b176089ade19c61cff8363ae37e3f7d351887856b1cfe35402a427d2cbb3586f4", 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c050) 04:37:23 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:24 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x3b9aca00}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:24 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x604]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:24 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x34}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:24 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES64=r1, @ANYRES32, @ANYRES16=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRESDEC=r3, @ANYRES16], 0x3c) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$802154_raw(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000080)={&(0x7f0000000180)="36a8df5aac1081a90ba003734ea9a7ccf7f1c637ed2a7917b491831667f838090f78a2c215305d768f137d9acac6a4f287dc950552ccdc541bb984629bb24fb489ef21a992e909766859b84f433c60f7c29bec5c13a464ab68ca63e6c46beed24552e0db7130a58b3507b503f6c6fc10327fbc5f6865e11ca47bd2408811b55baab29a94812461d9012863c3b26377d91958586c390541d58b7a96f3d1bfc399c40094013a62aa6d81c4fddb64c682de69a356d5baaf04434f63af66fe2906bcb34affd3958c687b6eed62dc9d311d49cf0f911838e54587096fc8023bd19c068059ea8d30ca3e8fd69e71e8a50eab9263", 0xf1}, 0x1, 0x0, 0x0, 0x84}, 0x0) 04:37:24 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2065400d70726f66698265202ff830a8dd37343391482a02006dc182d14185bcd7ae4eab2e02777627ae572aa27de124e3cc943bdd2e3f51aa8baf68fd"], 0x2b) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, 0x0, 0x1}, 0x5) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd_index=0x4, 0x20, &(0x7f0000000080)="d5b38bcb5eeb94b1909d9495eef33d4a852d7d105611fbce58c0891f1bd54005372834a44e9e47e71b51d4a4de8c12d0bd41cc4dc49b46f68f22c2238c276212", 0x40, 0x1c}, 0x3f) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0xd3f3, 0x2) 04:37:24 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:24 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="cd63fa8c5d04794a742023"], 0x3c) 04:37:24 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x428, 0x3f4, 0x100, 0x70bd28, 0x25dfdbfd, {0xa, 0x2, 0x1, [0x6, 0xfffffc00, 0x10001, 0x3ff, 0x1, 0x3, 0x6, 0x6, 0x8, 0x5, 0xfffffffd, 0x5, 0x2, 0x1000, 0x4, 0x5, 0x7, 0xfff00000, 0x7fff, 0x777, 0x10000, 0x0, 0x1f, 0x2, 0x0, 0x6, 0xfe59, 0x370, 0x4, 0x9, 0x5, 0x0, 0x1, 0x5, 0x1ff, 0x10001, 0x81, 0x7fffffff, 0x4000020, 0x8, 0x5, 0x80000001, 0x5, 0xf6c, 0x7, 0x2, 0x3, 0x4, 0x100, 0x40, 0x8, 0x8, 0x362, 0x1, 0x6, 0x8, 0x9, 0x9, 0x7fffffff, 0x7, 0xfffffffb, 0x7, 0x7ff, 0xffffffff], [0x0, 0x8, 0x4, 0x81, 0x7, 0x0, 0x5, 0x8000, 0x6, 0x3, 0x8, 0x3c776dd0, 0x8, 0x3, 0x6000, 0x5, 0xc8, 0x2, 0x10001, 0x1000, 0x5, 0x7, 0xc9, 0x8, 0x7fffffff, 0xfffffffe, 0x9e69, 0x7fff, 0x9f, 0x8, 0x8, 0x1, 0x6, 0x3, 0x3f, 0x0, 0x4, 0x0, 0xfff, 0x0, 0xfffffeff, 0xffffffff, 0x2, 0x5, 0x1000, 0x8000, 0x7, 0x1ff, 0x1f, 0x80, 0x2, 0x7f, 0xffffffff, 0x6, 0x8, 0x6, 0x1f, 0x100, 0x1, 0x20, 0x3fb, 0xffffffff, 0x5, 0x7], [0x7ff, 0x2, 0xd7e1, 0x8a, 0x9, 0x8, 0x7, 0x3ff, 0xd2a, 0x401, 0x4, 0x5, 0x80000000, 0x1, 0x7, 0xffff, 0x1, 0x4, 0x7, 0x58, 0x9, 0x2, 0xcb2, 0x2, 0x12, 0x6, 0x80000001, 0x101, 0x3, 0x18, 0x7ff, 0x7fffffff, 0x80000000, 0x6, 0x7fffffff, 0x93, 0x442, 0x82, 0x9, 0x4, 0x1, 0x7ff, 0x7f, 0x0, 0x8, 0x1, 0x9, 0x1, 0x10000, 0xfffffffb, 0x8000, 0x12, 0x0, 0x9, 0x3, 0x9, 0x45, 0x5, 0xffffffff, 0x0, 0x4, 0x6, 0x9238, 0x7f], [0x1ff, 0x7fffffff, 0x9, 0x8001, 0x7fffffff, 0x7, 0x3, 0x0, 0x7, 0x5, 0x1, 0x7, 0x0, 0x89, 0x400, 0x5, 0x7, 0x6, 0x7fffffff, 0xfffeffff, 0x20, 0x80, 0x1, 0x41, 0x7, 0x0, 0x1, 0x7ff, 0x7, 0x9, 0x8, 0x3, 0x7f, 0x7, 0x5da, 0x7, 0x80000001, 0x0, 0x7ff, 0x8, 0x8, 0x3f, 0x1800000, 0x9, 0x2, 0xffffffff, 0x6, 0x41, 0x2, 0x6, 0x3, 0x5, 0xffffffff, 0x7fffffff, 0x7ff, 0x100, 0x2, 0xfff, 0x3, 0x4, 0x8565, 0x4, 0x8, 0x8], 0x5, ['}@@\\\x00']}}, 0x428}, 0x1, 0x0, 0x0, 0x4001}, 0x8880) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:24 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="5d0022b60966c8e0b7e988a600000086b70c7c641ed6abc8036043abdc62f12f8a51396be650537e254cf456935bc6aaa66fa2c2db79ba1d86abd7f8155a15dd3c7ae96e8692de5432dfe058c2a0b1e0580101c9620b5a65f19b31ae4891751ec09a5ad2d6539ad6952d460d65f6d112d67628a1e0d338b829a865a79988091507c6dce9dc412293ee7b78b9b79b863fcf41ad19e90a89ef86606f1a6e56b1fc6e6f8e1d81c29eadb556d1a00e70780151c2395b2d6f781a8f7214542e46cb98ba903efce43bdbd01b737f7388f6c0cf3b4cc6269edaa50cb2512ee32b5b7ddc2c62ba0a3a09"], 0x2b) 04:37:24 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1800]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:24 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:24 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x7ffff000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:24 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1, @ANYBLOB="43dc96fca2891354e491e5d3feccbd9fcf7faa196c3af1", @ANYRES16=r3, @ANYRES16=r2], 0x3c) 04:37:24 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) process_madvise(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="4c688e46d1f81a481da70a702242dafd699f3b4bf938f37b239c0a4d1fd86c8acbff4bb1de9c505908bfaff6f954eec4eb6f4777ec27cd0c037a5032aba7a06aa843a2f68d7b7d883f4dd38b68368a7baa65b377f6ae1dea4685ab9cc3f0f7e8e755a5d43bac36c95a07d5804085f4ffa7e0ee2a3a29492094c02735032a7086b5e8d81703b63d398b04460cb026f13dde87d1b29a1c66bb90777dff0556037763fd77c27583f0bd463ae1694f8b65d5affaa9651609f417c2322e29", 0xbc}, {&(0x7f00000001c0)="f81423461bfb433574a6c8947714e7092c1a96ce44ef52659f0581842d57450caaa72f5e3f354a918d4d1fc235a0b4caff62bc33d5354489e3b2e01b5fe99424cd326a2af56ca8055d26bf43591c4b45a940cad961778e03453dafebf7ba3656a64f17784317540b1c155ffb251198b6b7d4a9fdf105b937acf478f2df1e0cf624cc87bfe1eb20864d620ee81c51f7bcdbfb9d0292", 0x95}], 0x2, 0xf, 0x0) 04:37:25 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc10}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:25 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d7030a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277000000000000000000"], 0x2b) 04:37:25 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1e00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:25 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x2) syz_io_uring_setup(0x72f9, &(0x7f0000000180)={0x0, 0xe2bc, 0x10, 0x2, 0x1fb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000002c0), 0x4) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000280), 0x4) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@default, @bcast, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x118, &(0x7f0000000300)=0x1, 0x0, 0x4) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r8, 0x0) 04:37:25 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="e368616e6765d679228faeef9816cce9f46861742017"], 0x3c) 04:37:25 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xc07e0000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:25 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000001900)=0x9, &(0x7f0000001940)=0x2) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[], 0x2b) r2 = accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000001980)=0x1, &(0x7f0000001b40)=0x2) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ah\x00'}, &(0x7f00000019c0)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000001a00)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00d8aef5d850f3c2629810cd522880800000000064000000004725001c00680000102f90780a010102ffffffff8307c7e000000200"]}) recvmmsg(r2, &(0x7f0000001a80)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/202, 0xca}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, &(0x7f0000000240)=""/124, 0x7c}, 0x6}, {{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2}, 0x7fff}, {{&(0x7f00000013c0)=@pppol2tp, 0x80, &(0x7f0000001800)=[{&(0x7f0000001440)=""/65, 0x41}, {&(0x7f00000014c0)=""/192, 0xc0}, {&(0x7f0000001580)=""/95, 0x5f}, {&(0x7f0000001600)=""/242, 0xf2}, {&(0x7f0000001700)=""/206, 0xce}], 0x5, &(0x7f0000001880)=""/2, 0x2}, 0x58}], 0x3, 0x12000, &(0x7f00000018c0)) 04:37:25 executing program 0: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) 04:37:25 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:25 executing program 3: getegid() openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x8, 0x3, 0x0, 0x80, 0x3, 0x9b, 0x0, 0x40, 0xd7, 0xc8, 0x6, 0x0, 0xffffff7f, 0x2, 0x9, 0x9d, 0x32, 0xaf, [], 0xc0, 0x400}) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000100)={0xea, "9260ffb5a0ea5fdfcba5106a321732555fc7697aba9d4a64702c4578d20b5704b954ae6143e43acc060ab50fd4a66d6718fc2b77f0e63b4487cad4be799a18be2a047a128b43168bbafab81ac18a2cb9832b5ba7a8b6eb815cb931c6fd18118f510d02400da1fce1bf78acf33e2dd1da54c4ecbbaaae763f2bed96a6027e6bd9bd69f458772e0cdb53a7863d41388cfdcdb1b9695fd989f0825f0e0e269698d91b1f1d9445be13bec27538a70762baad440f2f7e21fb7448af89bb76c8886bf9ba81c864bd382b68bd6af6f0e8f9548041641b16c2cd81ea4ca6671b470cfd0e0dcd0f7068444397756a"}) [ 1723.609614][ T8115] AppArmor: change_hat: Invalid input '#' [ 1725.442003][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1725.442014][ T36] audit: type=1400 audit(1615783045.310:600): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8210 comm="syz-executor.3" 04:37:25 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) recvfrom$l2tp6(r1, &(0x7f0000000100)=""/41, 0x29, 0x40000142, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x20) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x470, 0x3f3, 0x800, 0x70bd2d, 0x25dfdbfe, {0x5, 0x0, 0x35, [0xc0000000, 0xa2, 0xfff, 0x3ff, 0xfffff651, 0x1, 0x5, 0x7fff, 0x130, 0x4, 0x0, 0xc1f9, 0xffff8000, 0x0, 0x5, 0xfffffffb, 0x3, 0x4, 0x2, 0x3, 0x12, 0x4, 0x4, 0x400, 0x92, 0x1, 0x0, 0xfffffff9, 0x6, 0x6ad5, 0x7fffffff, 0x6b72, 0x8, 0x2, 0x9978, 0x1, 0x2, 0x153, 0x2, 0x80, 0x0, 0x40, 0x10001, 0x101, 0x3, 0x5, 0x2, 0x4, 0x5, 0x0, 0x8a, 0x4f680970, 0x3a, 0x80000000, 0x80, 0x86b7, 0x94, 0x4, 0xfffffffd, 0x2, 0x7d, 0x8, 0x1, 0x40], [0x5, 0x8, 0x1, 0xbfb, 0x9, 0x6, 0x3, 0x6, 0x0, 0x6, 0x7, 0x4, 0x400, 0x9, 0x0, 0x4, 0x0, 0x474955ea, 0x4e43, 0xfffffc01, 0x7, 0x18, 0x3, 0x0, 0x11, 0x400, 0x69d, 0x5, 0x6, 0x3, 0x7, 0x60, 0x5, 0xda4, 0xc95, 0x200, 0xffffffff, 0x4c7ccbd0, 0xff, 0x1f26, 0x4, 0x2, 0x1, 0xfff, 0x7, 0x100, 0x7ff, 0x8, 0x3, 0x81, 0x0, 0xffffffff, 0x14, 0x1, 0x27c, 0x1f, 0xfffff001, 0x401, 0x32c, 0x0, 0x4, 0x8, 0x9, 0x9], [0xfff, 0x3, 0x8, 0x7, 0xffffffff, 0x0, 0xfffeffff, 0x5, 0x4, 0x7fff, 0xfffffffc, 0x3, 0xa56c, 0x6, 0x3ff, 0x7, 0x80, 0x8000, 0x7, 0x7fffffff, 0x4, 0xfffff801, 0x1, 0x2, 0x8, 0x2, 0x1, 0x10001, 0x9, 0x3, 0x8, 0x9, 0x8001, 0x1, 0x2, 0x401, 0x3f, 0x0, 0x5a5, 0x3, 0x2, 0x0, 0x4, 0x9, 0x400, 0x6, 0x48, 0x3, 0x3, 0x1, 0x2, 0x3, 0x3f, 0xaab, 0x5, 0xffff, 0x0, 0x80000000, 0xffff, 0x4, 0x280542cd, 0x81, 0x8], [0x4, 0x0, 0x9, 0x401, 0xfff, 0x8, 0x3f, 0x7, 0x27, 0x6, 0x7, 0x7ff, 0x1, 0x80, 0x800, 0x0, 0x8, 0x6f6b, 0x0, 0x7, 0x0, 0x3ff, 0x6082, 0x6, 0x1ff, 0x0, 0x2, 0x2, 0x66, 0xfffffffa, 0x7fffffff, 0x9, 0x0, 0x80000000, 0xc9, 0x0, 0x1e7, 0x7, 0x80000000, 0x20, 0x2800000, 0x7, 0x3, 0xf79, 0x7, 0x0, 0x8, 0x0, 0x2, 0x42db, 0x4, 0xffff, 0x3, 0x9, 0x10001, 0x4, 0x7, 0xfffffff9, 0x3, 0x8, 0x4, 0x3, 0x1000, 0x6], 0x50, ['/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '$*\',{\x00', '\x84-,+@\\\x00', '}\\)%\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x470}, 0x1, 0x0, 0x0, 0x40}, 0x0) 04:37:25 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x100c}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:25 executing program 0: bind$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null, 0x3}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r0 = io_uring_setup(0x5948, &(0x7f0000000140)={0x0, 0x8d36, 0x2, 0x2, 0x135}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4ae9, 0x2, 0x0, 0x0, 0x0, r0, [0x0, 0x2]}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) 04:37:25 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x200, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8804}, 0x4040000) 04:37:25 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1725.548643][ T8238] AppArmor: change_hat: Invalid input '#' [ 1725.573140][ T36] audit: type=1400 audit(1615783045.450:601): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8239 comm="syz-executor.2" [ 1725.599411][ T36] audit: type=1400 audit(1615783045.470:602): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8239 comm="syz-executor.2" 04:37:25 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2400]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:25 executing program 2: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES32], 0x2b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'changeprofile ', ',#*\x00\x89\xee\x96\xef\xcfn\xe6\xd4(&\xf1Un\xc5r\xe1\x84\xc0\x99_\x86\x14B\xff\xda$d\xcc\xf8\xaev\xd6\x1a\xc0\xce\x15\xb0\xf2\x16\xd1L\xf7-\xeeu\v\b\x9a\v\xfc\xf1\x90.\x02\xb1\xf2\xca\x81N\x02\xcao+VA#)s\v\xce)\xd3\xb3 %\xac\xb8\xac\xfax&'}, 0x63) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x3, 0x4) [ 1725.647563][ T8258] AppArmor: change_hat: Invalid input '#' [ 1725.648148][ T8258] AppArmor: change_hat: Invalid input '#' [ 1725.670802][ T36] audit: type=1400 audit(1615783045.540:603): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8269 comm="syz-executor.2" [ 1725.714464][ T36] audit: type=1400 audit(1615783045.540:604): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8269 comm="syz-executor.2" 04:37:26 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='chanpehat #'], 0x3c) socket$inet6_sctp(0xa, 0x1, 0x84) 04:37:26 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xffffff7f}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:26 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2a00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:26 executing program 0: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000280)={&(0x7f00000001c0)="01787b73ee8ca33ba8018a02cba8eba4a2c0b8daaa2a95aa44b64c861619b78c9cd7ff524924093a0d9711888ffac33fff7270b5fe9550d2f79639c8d30a3770f10eb5a4949455e204cdf3a1deb99e7a463c39bad164f62204a41b1bc0626ed017b4736fe822604dbfe9752b70f4b83c6ed123812436ad7d024eef78f2faed45df5459", 0x83}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x22e400, 0x0) bind$802154_raw(r0, &(0x7f00000003c0)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) syz_io_uring_setup(0x6887, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) process_madvise(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="4c5d5fc120e2bd1ab17a8ca863b43f4b0410f85ca0b6041cbed162b3f0560492718f4483a70e19f81ec55e842a6ec14244b4d3554d5e1ca048d872ff93", 0x3d}], 0x1, 0xf, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000400)=""/98, &(0x7f0000000480)=0x62) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000004c0)={0x49, 0xbd}, 0x2) 04:37:26 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391502a80636dc182d141a385fcd760fa9887ae48ab2e0277"], 0x2b) 04:37:26 executing program 3: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x5) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) [ 1726.314466][ T36] audit: type=1400 audit(1615783046.190:605): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8284 comm="syz-executor.3" [ 1726.351861][ T36] audit: type=1400 audit(1615783046.190:606): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8284 comm="syz-executor.3" 04:37:26 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x3400}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:26 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:26 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) 04:37:26 executing program 0: r0 = syz_io_uring_setup(0x19ce, &(0x7f0000000000)={0x0, 0xc5, 0x0, 0x0, 0x35d, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x4000010, r0, 0x8000000) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000200)={0x0, 0x1010, 0x2, 0x3, 0x17, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000000c0)) io_uring_setup(0x561e, &(0x7f0000000180)={0x0, 0x6ca, 0x20, 0x1, 0x36d, 0x0, r0}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) r3 = accept$ax25(r1, &(0x7f00000002c0)={{0x3, @default}, [@bcast, @bcast, @bcast, @remote, @null, @null, @bcast, @netrom]}, &(0x7f0000000340)=0x48) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000380)) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000280)={@null, @null, 0x2, 0x20}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000100), 0x0, 0x4) 04:37:26 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x6, 0xa9}, 0x2) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8884}, @void, @eth={@broadcast, @random="8c4b18a9cebe", @void, {@llc={0x4, {@snap={0x1, 0xaa, "4df0", "ea893c", 0x6003, "5330e0864cbcc4add929b23608f9b125587a70a55f33b94f0de718a91c6b5339db2fe8e26126b77d16cfb150bd60e495e782d5d36eae7f6776c053a70e608750aee0ab73d4237c287e40ef937a86a9a80b7780fcf26e672588d6d42cf3d908665721c13e4688622e6369fcbfd995e7e9f1dddea0435eaba20fbd1094bfc9ce860e3dfa8dd8a719f76cdaa4c79e8bac4a227bf6318402ae9d2f0a1fa4f1d11f8206c88c7ff547e64eed1f5f8b2ad4fe5cf6f2ef348b0a7a6d9fb097bbe5f68f6e5560847b6d34209378f54ede5183980ddddf8e8b254acaa0547d1761ca247548fa7483d27e3b43f66bcb0554d383e0c867ffbc37efdaf743ea"}}}}}}, 0x114) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) syz_io_uring_setup(0x43e7, &(0x7f0000000000), &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000200)=0xffffffff, 0x4) [ 1726.389132][ T8299] AppArmor: change_hat: Invalid input '#' [ 1726.389993][ T36] audit: type=1400 audit(1615783046.210:607): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8288 comm="syz-executor.2" 04:37:26 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f0000000140)) 04:37:26 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3600]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:26 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) [ 1726.468484][ T8308] AppArmor: change_hat: Invalid input '#' [ 1726.526899][ T8323] AppArmor: change_hat: Invalid input '#' [ 1726.546840][ T8323] AppArmor: change_hat: Invalid input '#' [ 1726.576058][ T36] audit: type=1400 audit(1615783046.450:608): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8326 comm="syz-executor.2" 04:37:27 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x7ffffffff000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:27 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 04:37:27 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x7ec0}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:27 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRES32, @ANYRESOCT=r0], 0x3c) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) syz_extract_tcp_res(&(0x7f0000000100), 0xfff, 0x4b49) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x9, 0x1, 0xff, 0x0, 0x80000000, 0x5, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x5, 0x0, 0x6, 0x5, 0x92, 0x4, 0x2, 0x40, [], 0x8, 0x80000000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x44c, 0x3f3, 0x1, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x15, [0x6, 0x5, 0x1, 0x4, 0x4, 0x7, 0x4, 0x2, 0x1, 0x6, 0x80000000, 0x5, 0x100, 0x6, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x4, 0x1ff, 0x7, 0xfffff000, 0x20, 0x7ff, 0xec9e, 0xffffffff, 0x6, 0x2, 0x5, 0x401, 0x3, 0xfffeffff, 0x20, 0x9, 0x80, 0x7ff, 0x60e9607e, 0x3, 0x9, 0xa3, 0x5, 0x7fffffff, 0x10000, 0xc184, 0x9, 0x9, 0x7, 0x3f, 0x1, 0x8, 0x2, 0x5, 0x6, 0xffffff80, 0x800, 0xfffffff8, 0x5068, 0x0, 0x3, 0x1], [0x10000, 0x10000000, 0x5, 0x9, 0x8, 0x0, 0x1, 0xffffffff, 0x200, 0x2, 0x20, 0x5, 0x5, 0x8, 0x9, 0x7, 0x3, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x2, 0x7fff, 0x2, 0x81, 0x0, 0x8, 0x2, 0x0, 0x8, 0xb5c, 0x2, 0x8, 0x2, 0x2fcd, 0x2, 0x1, 0x6, 0x80, 0x9, 0x6, 0x7, 0x7f, 0x2, 0xffffffff, 0x7ff, 0x76c4, 0x1, 0x1, 0x80000000, 0x4, 0x0, 0x9, 0x80, 0x600000, 0x1, 0x1ff, 0x8, 0xfffff035, 0x80000001, 0x8, 0x80000001, 0xfffffffb], [0x2000000, 0x80000000, 0xffff, 0x0, 0x5, 0x7, 0x4, 0x6, 0x101, 0x5, 0x0, 0x450, 0x0, 0xffffffff, 0x8, 0x9, 0x8000, 0x10001, 0x6, 0x9a, 0x9, 0x5, 0x2, 0x1f, 0x8000, 0x4, 0x5, 0x9, 0x7, 0x6d36, 0x5, 0xff, 0xf9, 0x80000000, 0x8, 0x7, 0x1, 0x20, 0x1, 0x5, 0x9a, 0xad13, 0x0, 0x7, 0x80000000, 0x6, 0x5, 0x93d, 0x6, 0x3, 0x3, 0x5, 0x9, 0xd0e7, 0x1, 0x8001, 0x1, 0x1f, 0xd, 0x7, 0x100, 0x7, 0x8, 0x1], [0x9, 0x40000000, 0x7fffffff, 0x4, 0x7ff, 0x0, 0x3, 0x80000001, 0x8, 0x3, 0xfffffdf0, 0x80, 0x0, 0x7, 0x2, 0x3f, 0xd41c, 0x4, 0xffff, 0xb6b, 0x3, 0x1, 0x4, 0x7f, 0x6, 0x3, 0x2, 0x9, 0x3, 0x488, 0x83b, 0x7, 0x50f387ac, 0x4e0, 0x5, 0xa2f, 0x100, 0x5, 0x2, 0x0, 0xc4, 0x20, 0x0, 0x3f, 0x4, 0x0, 0xb62c, 0x2929, 0x6, 0x10000, 0x3, 0x7, 0x0, 0xfffe0000, 0x7, 0x7fffffff, 0x6, 0x8, 0x45, 0x20, 0x38, 0x9, 0x7f, 0x71], 0x2a, ['/proc/thread-self/attr/current\x00', '/proc/self\x00']}, [""]}, 0x44c}}, 0x4004800) 04:37:27 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3c00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:27 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70063904000000202ff830a837343391482abc77"], 0x2b) 04:37:27 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/22, 0x16}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="e19f81edf802f07be2010000c885dda8c9042ac8fac5da9bf8211b00000000000000000000beadcdcee6c75760ea257fe3552778da00000000000000000000005783d8e14ba7a4ca4bb7839ea2388490a1ba419a9163bbf20c17cbaccb371e"]) 04:37:27 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000100)=0x3ff, 0x0, 0x4) 04:37:27 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0002060001000a000000080003000a010101080003000000000014000400fc0100000000000000000000000000010800030003000000080002000000000008000300020000000800030003000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 04:37:27 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x4000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:27 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc07e}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:27 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x4000000000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:27 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@null, @default}) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7065400d70726f66698265202ff8b330a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:27 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x1be0, &(0x7f00000001c0)={0x0, 0xd1bc, 0x4, 0x1, 0x138}, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff1000/0xb000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f00000002c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0x1) r2 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r2, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x2, 0x10, r2, 0x8000000) [ 1727.342575][ T8359] AppArmor: change_hat: Invalid input '#' 04:37:27 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x4200]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:27 executing program 3: getgid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x3c) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) [ 1727.348001][ T8359] AppArmor: change_hat: Invalid input '#' [ 1727.389813][ T36] audit: type=1400 audit(1615783047.260:609): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8360 comm="syz-executor.2" 04:37:27 executing program 2: msgget$private(0x0, 0xc0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae77"], 0x2b) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000f70302002bbd7000ffdbdf25070000b9fb0000002e2f66696c65302e2f66696c65300000362b11ab7df113002b4c3baa978e7ed60952321873ce4a1b4436bcc584be5b0d41c1d1e9fe4fa99cebbb96f78f5a535dad553d9cc2c60c0dfa7289ed82c19939025d7fdd3af70aa2af5bd011830bab1568a7a718b7de7da4a4ff7b53f3a47f2ec81f6963b2a0f8a0f1e41cc7ff28bd072ad70bd98616a7da3f61f6c82c773f290caa936329b54b5b16cc909a40ad716b78dc4210098c2fa1bf2a2c2833a4190659519f0946f9fe7c466b06cabc9305765645f441de06ee927779ab03e661aa536c386055fd8cb26f012243c32b8e12996fb4bdd99920cfade8b488413e83d665dfbb3c89b9aac1a872de322b15f1e0cea7989332"], 0x28}, 0x1, 0x0, 0x0, 0x42}, 0xd0e5d413a00a6544) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x440, 0x3f3, 0x2, 0x70bd2c, 0x25dfdbff, {0x2, 0x2, 0x37, [0x8, 0x4, 0x2, 0x100, 0x2, 0x4, 0x4, 0x6, 0xffff97d9, 0x6, 0x1, 0x7fff, 0x6, 0x5, 0x5, 0x0, 0x306, 0x4, 0x1, 0x4, 0x97f0, 0x8, 0xffffffff, 0x5, 0x4, 0x2, 0x1, 0x400, 0x80000001, 0x1b, 0x6, 0x148, 0x10000, 0x7ff, 0x9, 0x3ea, 0x8, 0xf883, 0xffffffff, 0x7, 0x3, 0x1, 0x3, 0xf5, 0xa09c, 0x5, 0x6c, 0x4, 0x380000, 0x0, 0x9, 0x20, 0x400, 0xb1, 0xfffffffb, 0x0, 0x6, 0x4, 0x200, 0xfffffe00, 0xfc, 0x6, 0x8001, 0x3f], [0x10000, 0x9, 0x5, 0x0, 0xa39, 0x1ff, 0x98f3, 0x4, 0x4, 0xef, 0x40, 0x80000000, 0x3, 0xffffff48, 0x2, 0xffff, 0x6, 0x1000, 0x6, 0x1, 0x7fff, 0x4, 0x1, 0xffff, 0x7fff, 0x9, 0x7ff, 0x400, 0x9, 0x7fffffff, 0xced, 0x6, 0x90, 0xe663, 0xf62, 0x22, 0x9, 0x8000, 0x4, 0x1, 0x3ff, 0x2, 0x8, 0x4b, 0x7fff, 0x4aa0, 0x46f5, 0x7f, 0x7ff, 0x0, 0x40, 0xff, 0x6, 0x2, 0x1f754eb, 0xdf, 0x101, 0xc0f, 0x0, 0x6, 0x9, 0x7, 0x10001, 0xc84], [0x80, 0x5, 0xae, 0x6e, 0x20, 0x8, 0x88, 0x37e5c, 0x2, 0x5, 0x9, 0xfffffffb, 0x191fa003, 0x2, 0x2d56b483, 0x81, 0x0, 0x9, 0x4cd078f4, 0x7, 0x8, 0x80000000, 0x9, 0x1ff, 0x8, 0x0, 0x20, 0x1, 0x40, 0x0, 0x1, 0x7ff, 0x2, 0x7, 0x3, 0x353b, 0x20, 0x3, 0x4, 0x1, 0x0, 0x7, 0x8, 0x6, 0x99, 0x8db, 0xd07, 0x8000, 0x5, 0x7, 0x100, 0x7ff, 0x9, 0x3904, 0x8001, 0x9, 0x6679, 0x6, 0x8, 0x4, 0x1f, 0x9c1, 0x5, 0x10001], [0x26, 0x58, 0x8, 0x8, 0x7, 0x2, 0x2, 0x1, 0x2, 0x8, 0x7, 0x401, 0x0, 0x4, 0x3, 0x10001, 0x60, 0x80, 0x4b, 0x7f, 0x6, 0xd3, 0xcfc, 0x2, 0x2, 0xd3d0, 0x7, 0x10001, 0x0, 0x18, 0x1, 0x5, 0x3ff, 0x3, 0x9, 0xf1fa, 0xfff, 0x1, 0x81, 0x7f, 0x60a3, 0x8f5d, 0x2, 0xffffff99, 0x80000000, 0x9a7, 0x200, 0x4, 0x8000, 0x9, 0x2, 0x4, 0x1, 0xfffffffc, 0x0, 0x9, 0x2631e2cf, 0x0, 0x6, 0x8, 0x6, 0x2, 0x80000001, 0x2], 0x1f, ['/proc/thread-self/attr/current\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4004010}, 0x40050) 04:37:27 executing program 0: socketpair(0x4, 0x4, 0x1400000, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf2506000000080002000600000008000300070000004c0001800600010002000000060001000200000005000200ff00000014000400fe8000000000000000000000000000bb080006000700000014000400fe8000000000000000000000000000aa1800018014000400fc02000000000000000000000000000008000300040000000c000180060001000200000024000180080007"], 0xdc}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4860) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xc5b3, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 04:37:27 executing program 3: ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f00000000c0)=""/254, 0xfe}) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='chehat #'], 0x3c) 04:37:27 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x10000000000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:27 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[], 0x2b) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x40a80, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) process_madvise(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="95e72f94b3f7cfb662f11779976e59e449fd5033e3b0571a89dc2733b8f3803d5e4c3cc94d84455bc12243d6e841", 0x2e}], 0x1, 0xc, 0x0) 04:37:27 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x6000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1727.508546][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1727.549967][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:37:28 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x40000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:28 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x2b) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x800, 0x70bd2b, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x200, 0x70bd28, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000044}, 0x20040041) 04:37:28 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100)=0x1, 0x4) 04:37:28 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xff00]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:28 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x234081, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000180)) 04:37:28 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a3851622a62e0277"], 0x2b) 04:37:28 executing program 0: syz_io_uring_setup(0x228e, &(0x7f0000000140)={0x0, 0x3372, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) 04:37:28 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x10091]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:28 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) r2 = syz_io_uring_complete(0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0xfba, 0x12) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:28 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xca9a3b00000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:28 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7065400d70726f66698265242ff830a83734216f929def72f840755dbb07552ba70000000000000000c182d141a385bcd760fa9887ae48ab2e4277b1560c014ca1ee75aaeb6b7a75d10b60325ce5b75d2119474e"], 0x2b) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x3, @bcast, 0xee00}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000080)='\x00') r1 = syz_io_uring_complete(0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x9, 0x2) 04:37:28 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x40000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:28 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xca9a3b}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:28 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000340)={0x1, 0x4, [{r1, 0x0, 0x100000000, 0x10000}, {0xffffffffffffffff, 0x0, 0x8000, 0x2000}, {0xffffffffffffffff, 0x0, 0x1000000, 0xfffffffff1009000}, {r2, 0x0, 0x100000000, 0xfffffffffffff000}]}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000140)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000003c0)={0x7, 0x6}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000100)=0x1, 0x4) r4 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x464, 0x2, 0x70bd2a, 0x25dfdbfb, "573038ec06ebb4c8ac1cddc6d3bf611a6f919d7fd7c327965678f77334"}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = pidfd_getfd(r0, r4, 0x0) write$sysctl(r5, &(0x7f0000000200)='3\x00', 0x2) 04:37:28 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x2, 0x4) 04:37:28 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0xffff, 0x2) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:28 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x7, {{0xb, 0x4, 0x1, 0x9, 0x2c, 0x68, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@lsrr={0x83, 0x17, 0x78, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @loopback, @broadcast]}]}}}}}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 04:37:28 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x80000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1728.363429][ T8459] AppArmor: change_hat: Invalid input '#' [ 1728.445250][ T8474] AppArmor: change_hat: Invalid input '#' 04:37:28 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) 04:37:28 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="e768616e67656861742023e6948fdb3da98c0048f384965e52ae40f3667bdaf63a1cea489ea795ec254c3d23685da38b87fd631b"], 0x3c) 04:37:28 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x10000000000000) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x2, 0x44}) [ 1728.453675][ T8474] AppArmor: change_hat: Invalid input '#' [ 1728.500194][ T8485] AppArmor: change_hat: Invalid input '#' 04:37:29 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xf0ff7f00000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:29 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x1000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:29 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x91000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:29 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3054, &(0x7f0000000100)={0x0, 0x737e, 0x8, 0x0, 0x289, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x6505, &(0x7f0000000200)={0x0, 0x1f3d, 0x2, 0x2, 0xa7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r5 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r5, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x3, &(0x7f0000000340)={r3, r4+60000000}}, 0x4) 04:37:29 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065957130b01cbffb55861735400d70726f66698265202ff830a837343391482a80636dc182d141a385bc"], 0x2b) 04:37:29 executing program 3: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f00000000c0)=""/4096) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="6368616e676560617420231449a7150a3fe9746dd5490eda1f30bb22462f9b29fa620900d62b5401b7f589a1684801009d27490798b0424ff112c406245f49047e56"], 0x3c) r1 = semget(0x3, 0x3, 0x300) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000001140)=""/172) 04:37:29 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 04:37:29 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='s\x00'/16, @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00680000102f90780a010102ffffffff8307c7e000000200"]}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1a041046}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x50) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) write$apparmor_current(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277", @ANYRES64], 0x2b) 04:37:29 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x100900]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:29 executing program 0: syz_io_uring_setup(0x4898, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x127, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 04:37:29 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277b0b794ef62f810a28a12983963db1225f2a7114b2f563264501a0d87b31bddc53c8f34841a0ac1baa24af35e0f85cf9c34c79c9b116cc7e42847491f549b230ad20f220ee265b8a1a930183c1b6dec3a2dbf6575f41c36749d8e6ef66ad5eb217dca3ef231387a297020cc786184"], 0x2b) 04:37:29 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xf0ffffff7f0000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:29 executing program 0: syz_io_uring_setup(0x40006dad, &(0x7f0000000000)={0x0, 0x2424, 0x10, 0xfffffffe, 0x11, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000280)=0xff, 0x1) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000100)="f8d206c69311277b78747886cbadf133a6dc2c41a2729107751fe2f756aca2ad2c77294cb5c192ae0883733956f855cf733417c114bd186b308b0c439f57f950b9ea000000004493d39a2b8b082cdb19fa9dc6bf3d387dfa9572e61adfc83ca790d4ca", 0x10, 0x4000015, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x35}, 0x2}, 0x20) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 1728.506907][ T8485] AppArmor: change_hat: Invalid input '#' [ 1729.423040][ T8534] AppArmor: change_hat: Invalid input '#' 04:37:30 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x2000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:30 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x400000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:30 executing program 3: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@hat={'permhat ', 0x4, 0x5e, ['/proc/thread-self/attr/current\x00']}, 0x3a) r1 = accept(r0, &(0x7f00000000c0)=@phonet, &(0x7f0000000140)=0x80) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:30 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000080)=""/235, 0xeb}) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) 04:37:30 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x0, 0xd0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:30 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) mq_timedsend(r1, &(0x7f0000000000)="497a86bfe35d449ee967160690e0e96ab35ca36932d0cd40071889c370aea1da6e6657d2cd5eabe9714eeb8dfcf4c3114c874a90bf6f1877c07ad39d", 0x3c, 0x2, &(0x7f0000000080)={0x0, 0x989680}) 04:37:30 executing program 0: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004804}, 0x44004) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200001, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:37:30 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000000bfe1359851"], 0x3c) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 04:37:30 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x600000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:30 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:30 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x100000000000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:30 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x4, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) syz_io_uring_setup(0x1267, &(0x7f0000000100)={0x0, 0x4475, 0x2, 0x3, 0x201, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000300)='!@\x00') 04:37:30 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc100000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:30 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x10, 0x80, 0x2, 0x7, {{0x10, 0x4, 0x3, 0x2e, 0x40, 0x67, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010101, {[@noop, @lsrr={0x83, 0x13, 0xc5, [@remote, @local, @empty, @dev={0xac, 0x14, 0x14, 0x41}]}, @ssrr={0x89, 0xf, 0x32, [@private=0xa010100, @multicast1, @private=0xa010100]}, @generic={0x88, 0x6, "1c57ab50"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x700, 0x40, 0x200, 0x6, {{0x7, 0x4, 0x2, 0x21, 0x1c, 0x65, 0x0, 0x0, 0x8, 0x0, @rand_addr=0x64010101, @remote, {[@end, @end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=ANY=[], 0x3c) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40403, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) 04:37:30 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x80171e]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:30 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_complete(0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:30 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r0, 0x1, 0x2000}) r1 = pidfd_getfd(r0, r0, 0x0) r2 = memfd_create(&(0x7f0000000140)='[\\}]*.^{[{#]D*[@\x00', 0x2) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, 0x0) r5 = memfd_create(&(0x7f0000000180)='.!--/\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)={0x1, 0x7, [{r0, 0x0, 0x1000000, 0xfffffffffffff000}, {r1, 0x0, 0x1000}, {r2, 0x0, 0x0, 0xd000}, {r3, 0x0, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x1000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000}, {r5, 0x0, 0xfffff000}]}) 04:37:30 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:31 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000080)='}:\x00') process_madvise(r1, &(0x7f0000001380)=[{&(0x7f0000000180)="687705187f9c3a315437df2a23198b0afb58507bac2bfad1d9f4211e1292e85f6776c0c48c6ef3f5084b2c9799ebd416d107fa8972aae158bd179366fb86db85e7048dafccb0330cb6e7f303b3a18684e41e426f68f0dc300869e0c510cfc65a8b39337516174814a8bedac2de0c940bc69320d74e46bba7b1655ec1338289d5de206ce9841e653ca99b98b4d2dcbddfbcf9dfa6f87b7f7c4e7c88ed066dfd07ac4ef4625fac2e6c6b9883a2be38f2ba876899536342d29717cb71eb829d8656de3afa65047534b8df2ae3b61df6546417878fbff6711e8e201a684ceaab8b684a842d525dce85", 0xe7}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="44636a8ca070d1aa68bc943356635ae777ce070567f0248046a3204a6fa916ca6a4b773936c2c19d4d9dff8d45cf67877b43848356a9bd1058d29687b6f828afd9916b873e322fa9055db7304577f8e2ed6273417507f664653b93f6e54025900c86706a1ff521a681858d39980dcb00ae3d8f81170b0097af261be8a0cb612092633ddf6dbfcf8f9a84e04bf4919117613c63750caf41c5576053778c3fae8fe5d5027eb273c5eaaa8cf23316dfd8fce320b7c55e2764d10397629a214167f200dc7d5e75de1e", 0xc7}], 0x3, 0x64, 0x0) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r5 = pidfd_getfd(r3, r0, 0x0) bind$can_j1939(r5, &(0x7f00000013c0)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0x1}, 0x18) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000000)) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277", @ANYRES64=r6, @ANYBLOB="4256fff62adda013ad5f4bb97362a133d4370f03adf2dfddf3449080eefebd055ab2ff6e88b10f33769cc6ca6c72f8b2190cd4b53feb5ca1d142571d1d49c183c78b91091722e0825de23d13220407bb06b6900d7dc9bfab579135e34cdf1c9be245dfffdd37a068c231162f991a0d992c7bca2841cb146d4fa430c6b7118b0c688904ac4bc832edb04865025afc357ac0b6ac1c75f1e09cfe84639b87824ac850a81775415881d21564eed0c047d3", @ANYRESDEC=r1], 0x2b) 04:37:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:31 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x80ffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1729.432175][ T8534] AppArmor: change_hat: Invalid input '#' [ 1731.104135][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 1731.104146][ T36] audit: type=1400 audit(1615783050.980:621): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8598 comm="syz-executor.2" 04:37:31 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x40000, 0x0) pidfd_getfd(r2, r0, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x3c) 04:37:31 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x200000000000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:31 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x80011, r0, 0x0) [ 1731.199034][ T36] audit: type=1400 audit(1615783051.070:622): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8616 comm="syz-executor.2" 04:37:31 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x34000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:31 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:31 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xc0ffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1731.285417][ T36] audit: type=1400 audit(1615783051.160:623): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8624 comm="syz-executor.3" 04:37:31 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r2, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000001, 0xc010, r2, 0x10000000) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000000)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10800, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000000100)={0x1, 0x72c0, 0x1, 0x80, 0x6, 0x1, 0x6, 0x80, 0x0, 0x8, 0x4, "c1e49380a9358fac8050d107b33d3ef8017d6df6060494d1dcf807085cebaf50"}) 04:37:31 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$apparmor_current(r1, &(0x7f0000000280)=ANY=[], 0x2b) 04:37:31 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xf0ff20]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:31 executing program 0: r0 = io_uring_setup(0x398b, &(0x7f0000000100)={0x0, 0xf328, 0x20, 0x1, 0x16}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0, [0x0, 0x2]}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:31 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 04:37:31 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x3b9aca00}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:32 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x3400000000000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:32 executing program 2: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/316], 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x20048884) r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x801, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x1) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:32 executing program 0: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200201, 0x0) process_madvise(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="6ce6185992e3bc704e0cc01b58f0e6add6e30b34b4e8ca6271f4b1dc44302f9ba1c129cd66bdc0de55b3c549ebd74ca1e0e08909cfa06c4e83f181f3d16da7c8aabf64a0640bafd8c7b0e4fecf11c744f4be6e2b3753439cdd6943a913da49d9e7d3d528e27cbf53aca6d9b18d26258e66ba2b1b3151d11baf4409b879db66cbd2d109c6c754c5dd081ddb7c622baf6a4daf1d850670bdd6993ee9f1aeb21d72b1bf7b1ca9809f50ba1e1629d74fe829f7a5830ca0d748", 0xb7}, {&(0x7f0000000280)="f3299ab4ef1c67599d9b2bcadd2f3b1d4a44ba72ac", 0x15}, {&(0x7f00000002c0)="5a933b9b19e2a26363eeb47a402fed5998ee6c45049d97ce91a07906d989e7584704e03d9b241a46cf005560b14069ab3bc9e693068bdffd7aa0eb4be94d80b7c3985131", 0x6a}, {&(0x7f0000000340)="e36a17e9a19e45af789c880912ba84e62cb56aada71c6ef0c348f4cc25b879cd475c047bd3d1f3701a0652d61638b09201bd9a37a691d18c3c880e3f725f3499a71e37", 0x43}, {&(0x7f00000003c0)="2e265ccf43f7c998e7f91623adfd71b6f22379f9cf41a7f4357e61b532d56bd4c4", 0x21}], 0x5, 0xc, 0x0) 04:37:32 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000000c0)) 04:37:32 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065400d70726f66690000000000000000343391482a80636dc182d141a385bcd760fa9887ae48ab2a0273be6359b55ef8830ef2440c0a577c2382e5ab0d3b8c498509b66bc71265e4216a2783fb9f2bc27024b9daf3790c4a0cb5643c2afc11e140e8167bcecc"], 0x2b) [ 1731.394342][ T8649] AppArmor: change_hat: Invalid input '#' [ 1732.172733][ T36] audit: type=1400 audit(1615783052.051:624): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8673 comm="syz-executor.2" 04:37:32 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x2dc4, &(0x7f00000000c0)={0x0, 0xac5d, 0x0, 0x0, 0x119}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2010, r1, 0x10000000) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:32 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2040000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x37cb, &(0x7f0000000200)={0x0, 0x3297, 0x2, 0x1, 0x334, 0x0, r0}) syz_io_uring_setup(0x1b78, &(0x7f0000000000)={0x0, 0xc047, 0x8, 0x0, 0x89}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 1732.223180][ T36] audit: type=1400 audit(1615783052.071:625): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8673 comm="syz-executor.2" 04:37:32 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0x8000000000000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:32 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc07e0000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:32 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000025c0)=ANY=[@ANYBLOB="70e5400d70726f660e14ce7ce125e050698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277f7f605159ee7c3f5682376f2c80e031739d3c07a5e4e4f5f67e494974a93caff46427fc1d18781aba91d55fe0d74c39c81b70d2ed75e9700c388b47ef79c2789b26f3db2854f9a50fd522508edf788b93baba951c46188044181ccf2f423853950b229d3650706df118d5324972a8442c694a5ff863e"], 0x2b) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x800, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x19268d7a751d06e5}, 0x4000) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) clock_gettime(0x0, &(0x7f0000002540)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002400)=[{{&(0x7f00000002c0)=@llc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/63, 0x3f}], 0x5, &(0x7f00000007c0)=""/181, 0xb5}, 0x5}, {{&(0x7f0000000880)=@tipc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)=""/250, 0xfa}, {&(0x7f0000000a00)=""/38, 0x26}, {&(0x7f0000000a40)=""/2, 0x2}], 0x3, &(0x7f0000000ac0)=""/233, 0xe9}, 0xe980}, {{&(0x7f0000000bc0)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/11, 0xb}, {&(0x7f0000000c80)=""/142, 0x8e}], 0x2, &(0x7f0000000d80)=""/204, 0xcc}, 0xca9}, {{&(0x7f0000000e80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=""/214, 0xd6}, 0x4}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/207, 0xcf}, {&(0x7f0000002140)=""/10, 0xa}, {&(0x7f0000002180)=""/72, 0x48}, {&(0x7f0000002200)=""/117, 0x75}, {&(0x7f0000002280)=""/184, 0xb8}], 0x6, &(0x7f00000023c0)=""/26, 0x1a}, 0x7}], 0x5, 0x20, &(0x7f0000002580)={r4, r5+10000000}) 04:37:32 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x4000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) socket$nl_audit(0x10, 0x3, 0x9) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:32 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x420802, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277c1aaacd6bc2805169bb6088011b37fb149f8250ba220a423329da0084b22e361e97f19946cff35263471bc522da3dcf3dc26a914aec662ba9b1da2f98af501b73d8e020ea33cd2f895717de3ab25816bf1efcbd9df818299acf53c47eedf4539ef48f00225d9e2808b1958871ae82468cd3f398d1dfb35ffebc87ba4bd52870a28c57b0a7f2100"], 0x2b) 04:37:32 executing program 0: r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x8882, 0x20, 0x0, 0x40002, 0x0, r0, [0x0, 0x2]}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000180)='!\x00') mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x1810, r1, 0xfffffffffffffa7f) [ 1732.365933][ T36] audit: type=1400 audit(1615783052.241:626): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8710 comm="syz-executor.2" 04:37:32 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xc07e000000000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:32 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x20010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xd681) [ 1732.406983][ T36] audit: type=1400 audit(1615783052.241:627): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8710 comm="syz-executor.2" [ 1732.437996][ T8733] split_token_from_name: 6 callbacks suppressed [ 1732.438009][ T8733] AppArmor: change_hat: Invalid input '#' 04:37:32 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_io_uring_complete(0x0) write$apparmor_current(r1, &(0x7f0000000000)=ANY=[], 0x3c) 04:37:32 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x5000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xffffff7f}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1732.447684][ T8733] AppArmor: change_hat: Invalid input '#' [ 1732.473027][ T36] audit: type=1400 audit(1615783052.301:628): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8727 comm="syz-executor.2" 04:37:32 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 04:37:32 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x400, 0x70bd27, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24044805}, 0x8001) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) write$apparmor_current(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="70654066698265202ff830a81e65cb4d37343391482a80636dc182d141a301000000fa8d29ae48000000931e64a5fe3f0d843e0ee00f47876b95c4164e76a6a0bbdca4f2cb30bf1a09d394f816f4586e689149039823909a6dbb11b59ea31faf5b2a883f7ca69e929c97bc78e7a41e4c43a4e4380328bd0bc2c9fae2804b1e35efc6caea58bf711428a9533be3da2d55e04c1bb50fdd33eeefb728ac10639b9b527a06e815ec58cc3c29a6187c42761bcaa651e33e8bf0b4ff5e96bbd45848fbeb8ffb2a66259af036dcef5b7c8b32d222f4e490d161e57b7300a43914162df9e1e94d5c"], 0x2b) socket$tipc(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x52400, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:37:32 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x1024) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/26, 0x1a, 0x0, &(0x7f0000000080)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="6368616e676568612ed7a0a30bc67c74202398720e8e1fee11a60186995d23f97d1f632ae7264f9cb125a55e22685792f3fda095ba6fc71b29acc21813a675b8504f4a677a446ebc0e433945f7a1b8bc993d9e6bc4981a9cb90ae4ab0a0bddecce3abcef3ca1bdc6ec2c29432080fc9ce145b6d08622025b322b085a52b62635ec1aa6160903f2eda728d2b58b260857a216b212ba23d49b9e2721f4c0c928bfa65a187b05e5a7996c0357784985018a92a154fcd7d6fbb63a40781bad40522f35fcce"], 0x3c) 04:37:32 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0, 0xffffff7f00000000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1732.548727][ T36] audit: type=1400 audit(1615783052.401:629): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8741 comm="syz-executor.2" [ 1732.574877][ T36] audit: type=1400 audit(1615783052.401:630): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8741 comm="syz-executor.2" 04:37:32 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x6040000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00680000102f90780a010102ffffffff8307c7e00000020088edc84023b22256fea615445bee47b1b57de5a57d84332a5cb44af51b778a9ac4c6e1c965abe3bc0d66292935d207ab64fca2ce4d43e657baa9bb81bcc4cc79aa9fc9b0fcc8ed8235b44ed7629bba231d7dd6f585eda320143c836b34af84a48f3c89bb16755ee8b7241cabe646f9662aaf602e767272caa669eafd379c545b2e73667ebc9af8963cdf417c198d6a56ffdefca9e953e4c99d6dfe9349710c3b0d35e7919e019c"]}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000240)={'NETMAP\x00'}, 0xfffffffffffffffd) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, 0x0, 0x2, {0x1, 0xff, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="c7d5e3db2e831dfafbc7ec9b25eddfdf8c7e6952d8bbbbf3748cee1c2ac760b6e6ce4bc605bdd454a27b76c00b755b8fcdc100c3fc8c0094eb3dd9733fcacf0092f0e4912ae75077a8e6798ed34c7f9f5c706ec39783381c27282cc279c36402a92236d95774c789ca987c758e76fefb50ce976504d6ba09929cfe5fb991801fe637504b950a1344340ed1e8c7b67e8adbc60d605b171ea9e325", 0x9a}, 0x1, 0x0, 0x0, 0x40010}, 0x41) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:32 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:32 executing program 2: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x10000, &(0x7f0000000080)=0x4) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendto$l2tp6(r1, &(0x7f00000000c0), 0x0, 0x24040800, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x1, 0x1}, 0x20) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:32 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x34}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:32 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x8000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x3c) 04:37:32 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14, &(0x7f0000000200)={&(0x7f0000000140)="45dd16f1ec2b1e3a5fc6b0ffd0e5c28135cebd87b8514dcc70ffc74d7e03aeec82bad8a500f14741bb2789473b3faccd92ba0f8e55329911cf3a18b84d5d12348621981bd67a8ef20612c8011acb51a24df6c5c8bf722140f209802bd95d48ca176737aa12fdf22e9cf0b21799a088be846821e60b135d3f6d555c01009f252d1027d8d007933008a03e89606cb248f75a25736f60c93d5c6f", 0x99}}, 0x4040010) r2 = syz_io_uring_complete(0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x81, 0x5, 0x5, 0x0, 0xe3eb, 0x9, 0x0, 0x2, 0x3, 0x9e, 0x5, 0x1, 0x0, 0x6, 0x5, 0x5, 0x9, 0xd6, 0xc6, [], 0x3f}) write$apparmor_current(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7043400d70726f666982652091f0e32838482a8063a432d199c1e85c2fd760fa48ab2e027700000000000000"], 0x2b) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000000c0)) 04:37:32 executing program 0: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) syz_io_uring_setup(0x56f1, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000380)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x6020c0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000340)={{&(0x7f00000002c0)={'Accelerator\x00', {&(0x7f0000000200)=@adf_dec={@normal='NumberDcInstances\x00', {0x306}, {&(0x7f0000000140)=@adf_dec={@normal='NumberDcInstances\x00', {0x9}}}}}}}, 0x7}) 04:37:32 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x10000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x2}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:32 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0}, 0x400) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:32 executing program 0: r0 = syz_io_uring_setup(0x440b, &(0x7f0000000100)={0x0, 0xfffffffe, 0x10, 0x0, 0x3a2, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) io_uring_setup(0x7993, &(0x7f0000000180)={0x0, 0x6201, 0x1, 0x2, 0x265}) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x7) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000200)=0x1, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 04:37:32 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="5084fb92eb2be1ed81f96ae8573db78ae22978e79bae6dc504f4cc02569b78eab58b3f272a1dcd24d8780eb2cd730f0ea63db6608ba10a35a7258f52f2f4ce9b758e7c4e8370d069f2fb81fd4d936c00dbd22e562757d030290db6390125cbcf986ea2fabee26bfe09db634f2c0d99996450d48f5d6b479cfab56c42e33fc8eeb0d8cbf7eef7ef2d05f7de858ea9decf193744c7b590592a1fc62718977f622f0b", @ANYRES32=r0, @ANYRES32, @ANYRES16=r2, @ANYRES16, @ANYRESDEC=r1, @ANYRES16=r3], 0x3c) 04:37:32 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x18000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:32 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) [ 1732.731883][ T8778] AppArmor: change_hat: Invalid input '#' [ 1732.957636][ T8832] AppArmor: change_hat: Invalid input '#' 04:37:33 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1002}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:33 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x4, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 04:37:33 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400d70726f66698265202ff830a837340000482a80636dc182d141a385bcd760fa9808ae48ab2e02770000"], 0x2b) 04:37:33 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1e000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:33 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x4}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:33 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/202, &(0x7f0000000000)=0xca) 04:37:33 executing program 0: syz_io_uring_setup(0x3fe5, &(0x7f0000000100)={0x0, 0xc631, 0x20, 0x2, 0x101}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$inet(0x2, 0x6, 0x5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000240)=0x10) 04:37:33 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1e178000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:33 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 04:37:33 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_complete(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) syz_io_uring_complete(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x3c) [ 1732.964180][ T8832] AppArmor: change_hat: Invalid input '#' [ 1733.628447][ T8841] AppArmor: change_hat: Invalid input '#' 04:37:33 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x20000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:33 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x34}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:33 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1034}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:33 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r0, 0x10000000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:33 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:33 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x20fff000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:33 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x1, &(0x7f0000000100)={0x77359400}, 0x1, 0x1}, 0x7fff) 04:37:33 executing program 3: accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10, 0x80000) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[], 0x3c) 04:37:33 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2b) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1000, 0x2) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000002c0)={0x2, 0x2, 0x6}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) recvfrom$ax25(r1, &(0x7f0000000080)=""/97, 0x61, 0x2102, &(0x7f0000000100)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @default, @null, @null]}, 0x48) 04:37:33 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x7ec0}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:33 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:33 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x24000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:33 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0xc10}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:33 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = mq_open(&(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x80, 0x81, &(0x7f00000000c0)={0x1, 0x0, 0x5fb, 0x62}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000001140)=""/4109, 0x100d, 0x1, &(0x7f0000001100)={r2, r3+60000000}) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='changehat #', @ANYBLOB="a28b3dbe54d25b21556627e7502a3c408bccd669"], 0x3c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x270f00, 0x0) 04:37:33 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x6536, &(0x7f0000000100)={0x0, 0xb913, 0x10, 0x1, 0x2a8, 0x0, r0}) 04:37:33 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x100, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004000) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) 04:37:33 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2a000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:33 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x20006800}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:33 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x30000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1733.648596][ T8841] AppArmor: change_hat: Invalid input '#' 04:37:33 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$tcp_congestion(r1, &(0x7f0000000080)='dctcp\x00', 0x6) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6320000000000000000000281fed18ff0146656c03bc701de5d0901983d73dc9a364036a2dd5a089835f768ed637"], 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x4, 0x0, 0x101) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200240}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x8, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000051) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r6, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xaaf1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 04:37:33 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x20010, r0, 0x8000000) 04:37:33 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$apparmor_current(r1, &(0x7f0000000280)=ANY=[], 0x2b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) write$apparmor_current(r2, &(0x7f0000000080)=@hat={'changehat ', 0x0, 0x5e, ['/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00']}, 0x5b) socket$nl_generic(0x10, 0x3, 0x10) 04:37:34 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x100c}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:34 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x36000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:34 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2}, 0x78) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x0, 0x3, 0x1, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) write$sysctl(r3, &(0x7f0000000080)='6\x00', 0x2) 04:37:34 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) 04:37:34 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x7ffff000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:34 executing program 0: getpeername$ax25(0xffffffffffffffff, &(0x7f00000011c0)={{0x3, @null}, [@bcast, @netrom, @bcast, @remote, @rose, @bcast, @bcast]}, &(0x7f0000001240)=0x48) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$usbmon(&(0x7f0000001100)='/dev/usbmon#\x00', 0x7fffffff, 0x4000) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000001180)={&(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x3e4}) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={[0x7, 0x4, 0x101, 0xd3, 0x9, 0xfffffc01, 0x5, 0x10000, 0x9, 0x10002000, 0x81, 0x4, 0x7f, 0x4, 0x9, 0x7, 0x0, 0x5, 0x80000000, 0x3e, 0x6, 0x7, 0x26, 0x3, 0x8000, 0x1, 0x7, 0x2, 0x0, 0x4, 0x4, 0xc000, 0x3c, 0x3ff, 0x401, 0x7, 0x7, 0x1, 0x5, 0x5258, 0x7, 0x2, 0x800, 0xb1c6, 0x1ff, 0x7, 0x5, 0x0, 0x4, 0x0, 0x3f, 0x401, 0xfff, 0x8, 0x101, 0x368, 0x1f, 0xffffff7f, 0x3, 0x2, 0x0, 0x1, 0x4, 0x5, 0x4, 0x2, 0x3, 0x2, 0x239a, 0x10001, 0x5, 0x400, 0x4, 0x6, 0x9, 0x1, 0x401, 0x8, 0x369, 0x7fffffff, 0x5, 0xacb, 0x7, 0x8001, 0x100, 0xe52, 0x0, 0x4, 0x10000, 0x68, 0x5, 0xfffffe00, 0x6, 0x10000, 0x5, 0xfff, 0x9, 0x80000000, 0x0, 0xffffffff, 0x81, 0xb2c2, 0x8000, 0x1f, 0xf7, 0x7, 0x2, 0xffffffc1, 0xfff, 0xcbd3, 0xa2, 0x9, 0x41a, 0x8, 0x9, 0x7, 0x9, 0x0, 0x1, 0x8906, 0x6, 0xa438, 0x10001, 0x4, 0x6, 0x3, 0x9, 0x200, 0x6, 0x3, 0x80000000, 0x5, 0x4, 0x9, 0x1, 0x8000, 0x7fff, 0x80, 0x80000000, 0x10001, 0xdc, 0x6, 0x3, 0x3, 0x100, 0x6, 0x2, 0x80000000, 0x2, 0x5, 0x3, 0xe5, 0x1, 0x7, 0x2, 0x8, 0x4d20c932, 0x8000, 0x800, 0x5, 0x8, 0x0, 0x8, 0x2, 0x9, 0xfffffff7, 0x800, 0x2, 0x4, 0x1000, 0x4, 0x8, 0x2040, 0x2f, 0x1, 0x0, 0x1, 0x1000, 0x2, 0x8001, 0x4, 0x3f, 0x7, 0x1, 0xae17, 0x2, 0x3, 0xfffffeff, 0x2, 0x2, 0x7f, 0x200, 0x9, 0x2, 0x9, 0x7f, 0x5, 0x9, 0x0, 0x3, 0x1, 0x8, 0x2, 0x8000, 0xdc4, 0x9, 0x8, 0x8, 0x4, 0x78, 0x800, 0x89, 0x400, 0x4, 0x9, 0x100, 0xc45, 0x1, 0x0, 0x9d39, 0x59, 0x80000000, 0x7, 0x800, 0x0, 0x2, 0x5, 0x23, 0x20, 0x5, 0x10001, 0x4, 0x7fffffff, 0x13a, 0x0, 0x7, 0x8, 0x101, 0x3, 0xffffffff, 0x1f, 0xf4, 0x0, 0x9, 0x3f, 0x6, 0x3, 0x7, 0x1f, 0x1, 0x6, 0x6, 0x1, 0x4, 0x8, 0x101, 0x6, 0x3, 0xffff, 0x4b0, 0xa7, 0x1f, 0x3, 0x5, 0x2, 0x5, 0xd5, 0xfffffffa, 0x1, 0x5, 0x10001, 0x80, 0x6, 0x0, 0x3f, 0x7fff, 0x2, 0x9, 0xfffffff9, 0x10, 0xa66, 0x10001, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xfffffffb, 0x400, 0x55, 0x5, 0x9, 0x9, 0xbf93, 0x81, 0x6, 0x2400, 0x5a, 0x7f, 0xa25, 0x4b, 0x4, 0x800, 0x6, 0x9, 0x5, 0x5, 0xc8, 0x1, 0x5, 0x8000, 0x3, 0x7ff, 0x22, 0x8000, 0x0, 0x96, 0x1ff, 0x4, 0x6, 0x80, 0x9, 0x4, 0x5, 0x7fff, 0x3f, 0x1, 0x9, 0x101, 0x5, 0x7f, 0x80000001, 0x0, 0x4, 0x6, 0x4, 0x9, 0x7fa, 0x9, 0x4, 0x4, 0x6, 0x987, 0x1, 0x3, 0x7, 0x1, 0x3, 0x98, 0x9, 0x101, 0xfffffff9, 0x56, 0x9, 0x7, 0x1, 0x1352d336, 0x3ff, 0x10000, 0x1ceb, 0x3ff, 0x3, 0x4, 0x3, 0x5, 0x8000, 0x8, 0x9f05, 0x1, 0x3, 0x7fffffff, 0x3d, 0x0, 0x5, 0xf8000000, 0x1ff, 0x8, 0x5, 0x40, 0x101, 0xfffffffa, 0x9, 0xe7, 0x6, 0xffffffff, 0x80000001, 0x0, 0x81, 0x65ed, 0x2, 0x10000, 0x8001, 0x9, 0x5, 0x4, 0xfffff295, 0x3f, 0x6, 0x3, 0x7, 0xffff, 0x6, 0x2fc9, 0x6, 0x4, 0x8, 0xffffffff, 0x8199, 0x800, 0x101, 0x1, 0x7e, 0x0, 0x9, 0x3, 0xfffff671, 0x2, 0x191, 0xfffffffc, 0x9, 0xfff, 0x2a1956f8, 0x3, 0x1000, 0x10001, 0x80, 0x6, 0x1, 0x1, 0xfff, 0xfffffffc, 0x10000, 0x0, 0x8, 0x0, 0x3, 0x0, 0x9, 0x1f, 0xb0, 0x24, 0x5, 0x5a8, 0x6, 0xfff, 0x5a, 0x3, 0x38, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x40, 0x7fff, 0xffff9a83, 0xffffffc1, 0x7, 0x4, 0x10001, 0x1, 0x6, 0x7, 0xa58, 0x6, 0x1, 0x79d7, 0x5, 0x2, 0x400, 0x2, 0x2, 0x0, 0x2, 0x10000, 0x1, 0x8, 0x9, 0x4, 0x852, 0x3, 0x80000000, 0x1, 0x7, 0x6, 0x6, 0x7, 0x1, 0x5, 0x7, 0x5, 0x6, 0x8, 0x8, 0x9, 0x2, 0x10000, 0x2ba1, 0x3f, 0x1, 0x5, 0x6, 0x0, 0x7, 0x5, 0x1000, 0x3d, 0x0, 0x1, 0x2, 0xffff, 0x2, 0x80, 0x0, 0x2, 0x4, 0x7, 0x7, 0x10001, 0x8, 0x8, 0x81, 0x1, 0x4, 0x1000, 0x1, 0x5, 0x200, 0x7, 0xffff, 0x8, 0xd6, 0x5, 0x2, 0x6, 0x1, 0x554, 0x5, 0x4, 0x101, 0xf4, 0x3, 0x10000, 0x7, 0x7fffffff, 0x2, 0x800, 0x4, 0x4, 0x6, 0x9, 0x1ff, 0x8, 0xdf, 0x10, 0x5, 0x100, 0x8000, 0x5, 0x4, 0xfffffff8, 0x8001, 0xc1, 0x0, 0x3, 0xa97, 0x9, 0x75, 0x1, 0x0, 0x20, 0xc, 0x12000, 0x2, 0x1ff, 0x6d2, 0x2, 0x7, 0x7, 0x8, 0x401, 0x0, 0x7ff, 0x80000000, 0x0, 0x40, 0x7, 0x9, 0xe5, 0xa7, 0x3, 0x7fff, 0x1, 0xffff0000, 0x2, 0x1, 0xfffffffe, 0xc2, 0x200, 0x81, 0x8000, 0x4, 0x8, 0x9, 0x0, 0x8, 0x8f8, 0x5, 0x1ff, 0x6, 0xfffffff7, 0x616ef0eb, 0xffffffff, 0xfffffff7, 0x6, 0x8000, 0x664, 0xfa, 0xffff, 0x6, 0xfffffc01, 0x3ff, 0xb8b, 0xffff, 0x5, 0x7, 0x7, 0x7, 0xffff0000, 0x7, 0x9, 0x0, 0x7, 0x2, 0x7, 0xffffff64, 0x25, 0x2, 0x8000, 0x7ff, 0x101, 0xbff4, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x1196, 0x6, 0x101, 0xfb3, 0xfff, 0x2, 0x608, 0x98d, 0x6, 0x9, 0xff, 0x400, 0x4, 0x5, 0xf24, 0x80000000, 0x16c9, 0xb, 0x2, 0x2, 0x1, 0x9, 0x9, 0x7ff, 0xffffffc0, 0x6, 0x7, 0xffff, 0xb40, 0x7, 0x4, 0x3, 0xdd61, 0x800, 0x2, 0x0, 0x5, 0x3fd5, 0xac6, 0x5, 0x6, 0x401, 0x9, 0x2, 0x6, 0x7, 0x1, 0x7, 0x80, 0x9, 0x1, 0xfc20, 0x8, 0x5, 0x0, 0x8, 0x6, 0x2, 0x8, 0x9151, 0x3, 0x9, 0x5, 0x0, 0xfffffffd, 0x2, 0x81, 0x5, 0x3, 0x1ff, 0x7f, 0xfffffff8, 0x5, 0x7, 0x5, 0x5, 0x100, 0x9, 0x7d, 0x5, 0x9, 0x4, 0x3, 0x2, 0x0, 0x1000000, 0x1, 0xbf, 0x4f, 0xd34, 0x4d, 0x3f, 0x7, 0xffff, 0x1, 0x7fffffff, 0x1, 0x101, 0x5, 0x8, 0x8e54, 0xffff0001, 0x6, 0x0, 0x0, 0x81, 0x0, 0x80000000, 0x1f, 0x2, 0x7, 0x353, 0xec8, 0x80000000, 0x3, 0xcfd, 0x40, 0x2, 0x8, 0x40000, 0x8, 0x5, 0x2c3633dc, 0x80, 0xa75, 0x2, 0x7, 0x6, 0x3f, 0x5, 0x0, 0xb0f2, 0x3, 0x9, 0x20, 0x6ad0, 0x3, 0x7f, 0xcd8, 0x81, 0xfffffffa, 0x3e54, 0x7f, 0x7fffffff, 0xf4, 0xe0, 0xff5, 0x10001, 0x5, 0x9, 0x9, 0x10001, 0x8, 0x10000, 0x9, 0x976, 0x9, 0x1, 0x4, 0x0, 0x6, 0x0, 0x6578, 0x7, 0x3ff, 0xe3, 0xb, 0x43, 0x5, 0x8, 0x8, 0x1, 0x5, 0x7, 0x1, 0x40, 0x68e, 0x7, 0x0, 0x2, 0x5, 0x5, 0xffffffe0, 0x0, 0x1, 0x200, 0x7, 0x6, 0x80000001, 0x4, 0x80000000, 0x1, 0x100, 0x73d, 0x20, 0x7ff, 0x6db, 0x101, 0x7fff, 0x4, 0x10001, 0x4, 0x7b, 0x1, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x40, 0x9, 0x4, 0x3, 0x10001, 0x10001, 0x8, 0x20, 0x9, 0x7, 0x10001, 0xffff7cd9, 0x1, 0x401, 0x1, 0x0, 0x4, 0x5, 0x3, 0x9, 0x57ce, 0x7, 0x9, 0x1000, 0x5, 0x8, 0x5, 0x5, 0x1, 0x3, 0x3, 0x9, 0x2, 0x5, 0x8000, 0x3, 0xff, 0x2, 0x2, 0x5, 0x1443, 0x40, 0xfffffff9, 0x1, 0x4, 0x2, 0x0, 0x0, 0x80000001, 0x9, 0x73a, 0x101, 0x7ff, 0xcf2, 0x1, 0x2, 0x43, 0x0, 0xfffffffc, 0xffffff80, 0x6, 0x8, 0x3, 0xda53, 0xffff, 0x1000000, 0x1, 0x5, 0x6, 0x5, 0x9, 0x1, 0xffff, 0x4, 0x870, 0x8, 0x4, 0xa8, 0x4, 0x9, 0xffffff00, 0x3, 0x0, 0x10001, 0x2, 0x7, 0x9, 0x2, 0x5, 0x1, 0xffff0000, 0x6, 0xa7, 0x9, 0xffffffff, 0x5, 0x101, 0x2, 0x2, 0x9, 0x5, 0x100, 0x7, 0x4, 0xff, 0x1, 0x7, 0x3, 0x0, 0x1, 0x40, 0x4, 0x1, 0xfffffff9, 0x4, 0x800, 0x8, 0x4, 0x2, 0xc1, 0x32a, 0x3, 0x200, 0x84, 0x7f, 0x20, 0xffff, 0x7, 0x8, 0x101, 0xffff, 0x0, 0x8, 0x63, 0x8, 0x5, 0x4, 0x0, 0x69, 0x22, 0x0, 0x7, 0x9, 0x80, 0x9, 0x800, 0x7fff, 0x9, 0x0, 0xf7, 0x6, 0x1cc1be3, 0x20, 0x7fff, 0xffffff31, 0x3, 0x7, 0x6, 0x5, 0x100, 0x1, 0x8, 0x7fffffff, 0x6a, 0x33b, 0x3]}) 04:37:34 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf2506000000080002000600000008000300070000004c0001800600010002000000060001000200000005000200ff00000014000400fe8000000000000000000000000000bb080006000700000014000400fe8000000000000000000000000000aa1800018014000400fc02000000000000000000000000000008000300040000000c0001ac060001000200000024000180080007"], 0xdc}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r5, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x58}}, 0x4000040) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000041c0)={'syztnl0\x00', &(0x7f0000004140)={'gretap0\x00', r3, 0x7, 0x727, 0xee, 0x7, {{0x12, 0x4, 0x3, 0x3e, 0x48, 0x67, 0x0, 0x7f, 0x2f, 0x0, @local, @multicast2, {[@generic={0x89, 0x4, '?-'}, @ssrr={0x89, 0xf, 0xb3, [@private=0xa010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}]}, @lsrr={0x83, 0x1f, 0x38, [@broadcast, @rand_addr=0x64010101, @remote, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) connect$can_j1939(r2, &(0x7f0000004200)={0x1d, r6, 0x0, {0x1, 0x1, 0x2}}, 0x18) 04:37:34 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3c000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:34 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = semget(0x3, 0x3, 0x300) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$SEM_STAT_ANY(r2, 0x4, 0x14, &(0x7f0000000080)=""/136) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) [ 1734.017031][ T8920] AppArmor: change_hat: Invalid input '#¢‹=¾TÒ[!Uf'çP*<@‹ÌÖi' 04:37:34 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x8}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:34 executing program 0: mq_open(&(0x7f00000041c0)='!!!+\x00', 0x41, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}, 0x1, 0x0, 0x9effffff}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3fb, 0x10, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) r2 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r2, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xfc18, 0x2, 0x1, 0x186, 0x0, r2, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) syz_io_uring_submit(r3, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1}, 0x44) 04:37:34 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat\x00#'], 0x3c) 04:37:34 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x3400}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:34 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698261202ff830a899bfe8538003a8f2636681f7d4482a80636dc182d1dac2a62bd760"], 0x2b) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) 04:37:34 executing program 0: syz_extract_tcp_res(&(0x7f0000000100), 0x2, 0x9) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:34 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x42000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:34 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000200)) connect$can_j1939(r2, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x0, 0x1}, 0xfd}, 0x18) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000180)={0x5, 0x0, [{}, {}, {}, {}, {}]}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x9) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x5, 0x0, [{}, {}, {}, {}, {}]}) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x3c) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2, 0x0) r5 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x2, 0x80010, r4, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000000)) 04:37:34 executing program 0: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x1000, "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"}, &(0x7f0000001080)=0x1024) memfd_create(&(0x7f0000000000)='+:+-(,\x00\xe9\xa9\x92\x9f\x01\xee\x13\xaaJX\xbc\xc1\xf2\xd6Yw\xbc\x88\x96', 0x5) 04:37:34 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x91000100]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:34 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket(0x9, 0x6, 0x401) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x488, 0x3f4, 0x100, 0x70bd2b, 0x25dfdbfe, {0x4, 0x1, 0xf, [0xad43, 0xfee, 0x5, 0x6, 0x4, 0x4, 0x20, 0x0, 0xfffffffa, 0x9, 0x7, 0x200, 0x4, 0x0, 0x80000000, 0x9, 0x7ff, 0xd89, 0xff, 0xa5, 0x3, 0x8, 0x8, 0x7fffffff, 0x2, 0x3f, 0xfc000000, 0xfffffbff, 0x7, 0x0, 0x8, 0x0, 0x7, 0xf, 0x5, 0x9, 0x5, 0x5bdb, 0x3, 0x1, 0x9, 0x8, 0x6, 0xdac, 0x8, 0x0, 0x7, 0x7, 0x0, 0x7f, 0x0, 0x7, 0x1, 0x6, 0x2, 0xbc5b, 0x800, 0x3, 0x1, 0x7, 0x200, 0x5, 0x2, 0x10000], [0xffffff09, 0x20, 0x7, 0x6, 0xb5, 0x7f, 0x2, 0x0, 0x262e, 0x1, 0x7, 0x6, 0x10000, 0x80000001, 0x0, 0x0, 0x1000, 0x39df, 0x5, 0x7ff, 0x3f, 0x1, 0x0, 0x5, 0x3, 0x1, 0xfffffffa, 0x1, 0xa2, 0x7, 0x7fff, 0x1, 0x3, 0x5d8c, 0xfff, 0x5, 0x8, 0x4, 0x8000, 0x9, 0x80000000, 0x2aa2, 0x6, 0x4, 0x9, 0x1, 0xe2cf, 0x200, 0x5, 0xffffff01, 0x4, 0x4, 0x23, 0x9, 0x7, 0x0, 0x7, 0x1, 0x800, 0x39b, 0x80000000, 0x7, 0x7, 0xc264], [0x3f, 0x4, 0x9, 0x7, 0x8, 0x6, 0x8, 0x4, 0x3f, 0x6, 0x1f, 0x8, 0xff, 0x400, 0x7, 0x7fff, 0x6, 0x7, 0x81, 0xbdc, 0xffff, 0x8000, 0x7e8, 0x3, 0x6, 0x9d, 0x7fff, 0x8, 0x2, 0x8000, 0xae, 0x5, 0x2, 0xffffff3f, 0x0, 0x80000000, 0x8, 0x3, 0xffffffff, 0x3, 0x3, 0x400, 0x80000001, 0x40, 0x3, 0x9, 0x0, 0x6, 0x4, 0x200, 0x1400000, 0x101, 0x3, 0x9, 0x293f, 0x2, 0xd2d, 0x6, 0x5, 0x9, 0x71b, 0x7, 0x3, 0xfffffa5e], [0x0, 0x3, 0x9, 0x8000, 0x2, 0x7fffffff, 0x4, 0x7, 0x101, 0xffff, 0x1ff, 0x7973d8a9, 0x9, 0xe4, 0x1, 0x1, 0xf794, 0x400, 0xfffffffd, 0x5, 0x400, 0x7ff, 0x80000001, 0x8000, 0x8001, 0x3, 0x9, 0x80, 0x800, 0x80000000, 0x8001, 0x8, 0x4, 0xff, 0x10001, 0x527, 0x8, 0x2, 0xefb6, 0x0, 0x7fffffff, 0x40, 0x4, 0x7, 0x4, 0x1, 0x9fc, 0x966, 0x1f51, 0x7fff, 0x1560, 0x8, 0x0, 0x8, 0x101, 0x9, 0x8001, 0x2, 0x7fffffff, 0x7, 0x7ff, 0x3f, 0x80, 0x6], 0x65, ['/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '\'+::^}l\x00']}, ["", ""]}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$KVM_SMI(r1, 0xaeb7) 04:37:34 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x10000000) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x3c) 04:37:35 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:35 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xfeffffff]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:35 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_complete(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x1010, r0, 0x0) 04:37:35 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x7ec0}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:35 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='changehat #'], 0x3c) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) 04:37:35 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x450, 0x3f4, 0x400, 0x70bd29, 0x25dfdbff, {0x10, 0x2, 0x2d, [0xf688, 0x1, 0x1, 0x1f, 0x2, 0x0, 0x401, 0x7, 0x40, 0xffffffff, 0x0, 0x9, 0x8001, 0x1, 0xffffffff, 0x6, 0xfffffffc, 0x10000, 0x5, 0x4, 0x7e, 0x2, 0x1, 0x100, 0xe9c0, 0x200, 0xffff, 0x5b, 0x6, 0x7fffffff, 0x200, 0x65, 0x8, 0x68b, 0x7, 0x400, 0x0, 0x800, 0x1f, 0x1, 0xf8b, 0x64fb, 0x800, 0xe000000, 0x1, 0x40, 0x7, 0x0, 0x9, 0x5e3b, 0xf7f4, 0xff, 0xa05, 0xf913, 0x3ff, 0x1000, 0x2, 0x4, 0x1f, 0x9, 0x400000, 0x0, 0x24, 0x1], [0xfffffff7, 0x7, 0x5, 0x8, 0x9, 0x0, 0x6, 0x0, 0x9, 0x5, 0x6, 0x1000, 0xfffffffc, 0x80, 0x401, 0x3ff, 0x3, 0x6, 0x1, 0xffffff01, 0x10001, 0x7f, 0x100, 0x1, 0x9, 0x10001, 0x80000001, 0x3, 0x7fff, 0x8000, 0x7, 0x7, 0x3, 0x9, 0x10000, 0x48, 0x8001, 0x8, 0x0, 0x7, 0x1ff, 0x100, 0x7ff, 0x589, 0x9, 0x8, 0x7, 0x4, 0xff, 0xb6, 0x80, 0x7ff, 0x3ff, 0x8001, 0x5, 0x2, 0x1, 0x3f, 0x6, 0x6, 0x0, 0x7, 0x401, 0x5ff], [0x4, 0x693, 0x10000, 0x7000000, 0x4, 0x6c1, 0x8, 0xdc6b, 0x3, 0x396, 0x835e, 0x10000, 0x0, 0x9, 0x7ff, 0x80000000, 0x81, 0x2, 0x0, 0x200, 0x9, 0xfffffffd, 0xc78, 0x34d2, 0x6, 0x0, 0x24, 0x11, 0x8001, 0x3, 0x5599, 0x76b, 0x7, 0x40, 0x4d1a, 0xf225, 0x1, 0x4, 0xcc65, 0x1, 0x8001, 0x81, 0x9, 0xfffffe00, 0xafb, 0x16, 0xae5, 0x400000, 0x1, 0xff, 0x1, 0x72, 0x4a, 0x401, 0x7, 0x100, 0x8000, 0x8, 0x10001, 0x7fff, 0x9, 0x401, 0xcc6f, 0x9d9e], [0x1ff, 0x3, 0x4, 0x2, 0x3, 0x0, 0x9, 0x9, 0x0, 0x1ff, 0x6, 0x6835, 0x8, 0x0, 0xffffffff, 0x0, 0x8, 0x8001, 0x4, 0x3f, 0xcc90, 0x4b2, 0x1ff, 0x9, 0x8c3, 0x7f, 0x1, 0x5, 0x4dd, 0x3, 0x2, 0x405, 0xaeb0, 0x8, 0x3ff, 0x1, 0x3, 0x0, 0x3ff, 0x2, 0xfff, 0x1, 0x4, 0x3ff, 0x0, 0x5, 0xffffffff, 0x0, 0xfffffff8, 0x0, 0x81, 0x9, 0x8, 0x6, 0xb17, 0x861, 0xfb5, 0x0, 0x3ff, 0x8, 0x4, 0x0, 0xfffffffb, 0x7fff], 0x2f, ['\'.)#\x00', '\\\x00', '[!,*+#{)\x00', '/proc/thread-self/attr/current\x00']}, ["", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) 04:37:35 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xff000000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:35 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0xae409d7c2fa518b9, 0x70bd2c, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000380)="2a1a26af1edec6809fd83a7ccbd0e1a880a66e49715f0d79db7e8e0ef2b9dd32bae187343b66d639c6b2ea6f06733dd681e235f9d583c875c0c0779382d1", 0x3e, 0x6, &(0x7f0000000400)={r4, r5+10000000}) r6 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r6, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x30, r6, 0x0) 04:37:35 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) 04:37:35 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3c) 04:37:35 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xfffffffe}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x74240, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000300)) 04:37:35 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xffff8000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1734.247973][ T8960] AppArmor: change_hat: Invalid input '#' 04:37:35 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x4}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:35 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xffffc000]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:35 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x80, 0x20, 0x1, 0xfffffffb, {{0x35, 0x4, 0x0, 0xa, 0xd4, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @broadcast, {[@rr={0x7, 0xf, 0x2a, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ssrr={0x89, 0x7, 0x20, [@remote]}, @cipso={0x86, 0x3a, 0x1, [{0x7, 0x2}, {0x6345304f8dae3f96, 0x12, "c6c656db3d3104c366fdfcdda75329d0"}, {0x5, 0x4, "81d2"}, {0x7, 0x6, "aa0580b7"}, {0x1, 0x6, "41c63312"}, {0x0, 0x9, "3fb2773ef28ef5"}, {0x5, 0x7, "7e9321da1d"}]}, @noop, @timestamp_addr={0x44, 0x44, 0x58, 0x1, 0x8, [{@rand_addr=0x64010100}, {@multicast2, 0x3}, {@local, 0x5}, {@rand_addr=0x64010101, 0x4b}, {@loopback}, {@loopback, 0x1}, {@private=0xa010100, 0x20}, {@local, 0x8}]}, @rr={0x7, 0x2b, 0x8c, [@private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @rand_addr=0x64010100, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}]}}}}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x20100, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00', r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000203f455bb0e80c42fbda8a3eebd0733b702312f5434074ea078b2c6c57f0c14474e06a88d6b9c998361801034c80fe05526bdd58f7928807624f0018c98e2f6012156818d0beb77f0b34995f632abf944e3e8a44b8bff128bb12d4fa78645c71420749", @ANYRES16=r3, @ANYBLOB="000125bd7000fddbdf25080000000500070003000000050004004000000008000c000400000008000c0004000000"], 0x34}, 0x1, 0x0, 0x0, 0x400}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000080)=@raw=[@ldst={0x1, 0x0, 0x3, 0xa, 0x5, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @generic={0x3, 0x8, 0x0, 0xfff9, 0x400}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x51, &(0x7f0000000100)=""/81, 0x1e00, 0x14, [], r1, 0xd1b51b955e2d0852, r2, 0x8, &(0x7f0000000300)={0x400, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0xfffffeff, 0x735}, 0x10, 0x0, r0}, 0x78) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r5 = semget$private(0x0, 0x4, 0x0) semtimedop(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semtimedop(r5, &(0x7f00000001c0)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r4], 0x2b) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x44000, 0x0) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000580)=0x3def, 0x2) 04:37:36 executing program 0: semctl$GETPID(0x0, 0x2, 0xb, &(0x7f0000000100)=""/47) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0xc07e}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:36 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[], 0x3c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0xffffffff}) 04:37:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xfffffffe]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:36 executing program 2: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x40, 0x3, 0x7f, 0x0, 0x5, 0xda3c, 0x4}, &(0x7f00000000c0)={0x6, 0x5, 0x3, 0x9, 0x10001, 0x5, 0x84, 0x8}, &(0x7f0000000100)={0x3ff, 0x9, 0xa7, 0x0, 0x7, 0x9, 0x3, 0x6}, &(0x7f0000000180)={r0, r1+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x4]}, 0x8}) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd700fa9887ae48ab2e0277"], 0x2b) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x3}}, 0x14) syz_extract_tcp_res(&(0x7f0000000040), 0x80000001, 0x2) 04:37:36 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0x3, 0xfffffc00}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, &(0x7f00000000c0)={'geneve0\x00', @ifru_flags}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887af50ab2e0277"], 0x2b) 04:37:36 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) r1 = syz_io_uring_complete(0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) write$apparmor_current(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRESDEC=r4, @ANYRESOCT, @ANYRES16=r5, @ANYBLOB="c74ee8ae57028d334454475051ffe434b689b67f19d47d8ca6d327a6efe3260ec494b06f57a0fa69f0aba801228714636d0a823878a0c35f348e76697a24b17742d7eafca247ceb4c58d9f756c0e66c268124ab332c4d2ef422b1a7e7f37d70c16f8da7fefcd22e290acfcf74fe8f2324f86537a47d9b61cb836049bbe9dab85c2d6dbbb2fdca9662ee79c9fccc9", @ANYRESHEX=r4, @ANYRESOCT=r3], 0x2d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x20000, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000011}, 0x4804) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 04:37:36 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000180)='vegas\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x4}, 0x3) 04:37:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3563, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x100000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:36 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x10}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:36 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/40, 0x28}) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7065400d7072e3ff852665202ff830a8f4773a239d851bafd9b95dff7f0000f337343391482a80636dc182d141a385bcd7e275735635aca65cc860"], 0x2b) 04:37:36 executing program 3: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="3b943d6ae2867ba06c942363d7ba1acdcf51cda88af29054a3174b03b0ab9a1872631ddb16c3beb45476f3c193207c28a427958f3133ecd396f959eecec0d391da6d9101f95c398d31a6a63dfb10f4f246010a06ee"], 0x3c) 04:37:36 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000100), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000140)=0x1, 0x0, 0x4) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000180)=""/115) [ 1735.941872][ T9055] AppArmor: change_hat: Invalid input '#' [ 1736.913852][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 1736.913863][ T36] audit: type=1400 audit(1615783056.791:650): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9115 comm="syz-executor.2" 04:37:36 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r0 = socket(0xa, 0x5, 0xdcb) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x424, 0x3f4, 0x0, 0x70bd2c, 0x25dfdbfc, {0x15, 0x0, 0x17, [0x10001, 0x3, 0x3a6, 0x1f, 0x7fff, 0x92, 0x81, 0xfff, 0x6, 0x3e, 0xffffdbb2, 0x1, 0x9, 0x6, 0x7, 0x8001, 0x4, 0x8, 0x8, 0x0, 0x5, 0x7, 0xff, 0x0, 0x8, 0x6ffe, 0x10000, 0x80, 0x6, 0x36e, 0x1, 0x1, 0x81, 0x80, 0x7, 0x6, 0x5, 0xa357, 0x7, 0x9, 0x8001, 0x196da65, 0x5683, 0x5, 0x5, 0x7, 0x8001, 0xd1, 0x0, 0x7, 0xffffffff, 0x1f, 0x2, 0x1, 0xf0ff, 0x10000, 0x100, 0x1f, 0x110c40, 0x3, 0xc4, 0x2, 0x0, 0x20], [0x7, 0x5, 0x4, 0x7, 0x7ff, 0x1, 0xdd, 0x1, 0xffff, 0x4, 0x7, 0xed2, 0x3f, 0xef, 0x8, 0x20, 0x0, 0xc, 0x7, 0x3, 0xffff, 0x30e, 0x4, 0x2997, 0x0, 0x7f, 0x40, 0x81, 0x40, 0x8b8, 0x1, 0x3ff, 0x1, 0xc07, 0x2, 0x8, 0x5, 0x7d6d, 0xfffffff8, 0x0, 0x0, 0x4, 0x4, 0x6, 0x4, 0x1, 0x10001, 0x9, 0xfad, 0xffffffff, 0x10000, 0x0, 0x1, 0x401, 0x8, 0x97, 0xfffffffc, 0xa1, 0xffff, 0x12d1, 0x6, 0xfff, 0x3, 0x8001], [0xffffffff, 0x7f, 0x6, 0x3, 0x0, 0x100, 0x2, 0x3, 0x4, 0x7a, 0x5c81, 0x0, 0x80000001, 0x6f26cca1, 0x10000, 0x372ec5c8, 0x3ff, 0x6, 0x5, 0xfffffff8, 0x401, 0x0, 0x7, 0x2, 0x8000, 0x3, 0x3, 0xfb, 0x3ff, 0x6, 0xd1, 0xf2a7, 0xe6, 0x9, 0x9, 0x5, 0xffffffe0, 0x80, 0x7, 0x5, 0x2, 0xe00, 0x4, 0x2, 0x400, 0x7, 0x401, 0x80, 0x2e, 0x376, 0xfffffffb, 0xfffffc00, 0x8, 0x100, 0x101, 0x100, 0x6, 0x800, 0xfffff0ff, 0x9, 0x3, 0x9, 0x9, 0x2], [0x4, 0x3ff, 0x1, 0x3, 0x10001, 0x6, 0x3f, 0x2, 0x28b7, 0x9, 0x10000, 0xfff, 0x3ff, 0x4dcf3e1f, 0x7f, 0xffffba99, 0x2, 0x40, 0x0, 0x80, 0x10001, 0x0, 0x34, 0x1, 0x2, 0x20, 0x1, 0x400, 0x8001, 0x2, 0x6, 0xd91, 0x4f21, 0xff, 0x8, 0x101, 0x0, 0xd34, 0xaff, 0x9f, 0x80, 0x81, 0x9, 0x101, 0x81, 0xfffffffb, 0xaf4, 0x0, 0x81, 0xa7, 0x7f, 0x6, 0x0, 0x4, 0x9, 0x8, 0x8, 0x8, 0x8, 0x0, 0x2, 0x400, 0x81], 0x1, ['\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20048817}, 0x4004080) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:36 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:36 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698261202ff830a899bfe8538003a8f2636681f7d4482a80636dc182d1dac2a62bd760"], 0x2b) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) [ 1737.030061][ T36] audit: type=1400 audit(1615783056.901:651): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9133 comm="syz-executor.2" 04:37:37 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0xca9a3b}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:37 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator1\x00', {}, {&(0x7f0000000340)={'Accelerator0\x00', {&(0x7f0000000280)=@adf_dec={@format={'Cy', '1', 'RingSymRx\x00'}, {0x5}, {&(0x7f0000000100)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {"6846f53835dd694e5217552753a5f7e7484852b259edaad31fc35620b2b937f2cf32b37566ee00e5a5f944726e6161a2dd2b3f7d49a0446b7005e93dd51e06e0"}}}}}}}}}, 0x6}) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:37 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000006540)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80616dc1822c1c93e7ee2b02483c1dd2841fe1773b40d140a385bc0800fa9887ae48ab"], 0x2b) syz_io_uring_complete(0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000080)="1a6e0cee82b62d0f5be47451c7fe4ff17be2fef40cb1dab6e57899d16608068998f86a6c8534e777122003cc73f38d5fe92e2cc6a418855233e8618458ef269243ebfeb9842a541390cbabaf7b9e64efe5e85884b0c88b7a57680de4069ebde2fc8457fa99b887fff95fe68996ca5371065229efafcfd65fcbb8e1903d6c89b2a3e1ad42672951067f45350c9071", 0x8e, 0x4044004, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000008440)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000008200)=[{{&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/239, 0xef}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000240)=""/11, 0xb}], 0x4, &(0x7f00000004c0)=""/5, 0x5}, 0xfffffff9}, {{&(0x7f0000000500)=@pppol2tpv3, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/142, 0x8e}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/60, 0x3c}, {&(0x7f0000000940)=""/82, 0x52}], 0x6, &(0x7f0000000a40)=""/178, 0xb2}, 0x3}, {{&(0x7f0000000b00)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/52, 0x34}, {&(0x7f0000001c00)=""/153, 0x99}, {&(0x7f0000001cc0)=""/101, 0x65}], 0x5, &(0x7f0000001dc0)=""/64, 0x40}, 0x6}, {{&(0x7f0000001e00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003000)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/95, 0x5f}, {&(0x7f0000002f00)=""/84, 0x54}, {&(0x7f0000002f80)=""/121, 0x79}], 0x4, &(0x7f0000003040)=""/4096, 0x1000}, 0x5c6726fb}, {{&(0x7f0000004040)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000050c0)=[{&(0x7f00000040c0)=""/4096, 0x1000}], 0x1}, 0xffff}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006740)=""/4096, 0x1000}], 0x2, &(0x7f0000006140)=""/107, 0x6b}, 0x8}, {{&(0x7f00000061c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f00000079c0)=[{&(0x7f0000006240)=""/147, 0x93}, {&(0x7f0000006300)=""/171, 0xab}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/76, 0x4c}, {&(0x7f0000007740)=""/161, 0xa1}, {&(0x7f0000006500)=""/5, 0x5}, {&(0x7f0000007800)=""/143, 0x8f}, {&(0x7f00000078c0)=""/209, 0xd1}], 0x8, &(0x7f0000007a40)=""/151, 0x97}}, {{&(0x7f0000007b00), 0x80, &(0x7f0000007e40)=[{&(0x7f0000000b80)=""/63, 0x3f}, {&(0x7f0000007b80)=""/255, 0xff}, {&(0x7f0000007c80)=""/29, 0x1d}, {&(0x7f0000007cc0)=""/186, 0xba}, {&(0x7f0000007d80)=""/62, 0x3e}, {&(0x7f0000007dc0)=""/108, 0x6c}], 0x6, &(0x7f0000007ec0)=""/154, 0x9a}, 0x3ff}, {{&(0x7f0000007f80)=@nl=@unspec, 0x80, &(0x7f00000080c0)=[{&(0x7f0000008000)=""/185, 0xb9}], 0x1, &(0x7f0000008100)=""/211, 0xd3}, 0x9}], 0x9, 0x2000, &(0x7f0000008480)={r2, r3+60000000}) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000280), 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000006600)={'syztnl2\x00', &(0x7f00000084c0)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x7, 0x9, {{0x1b, 0x4, 0x2, 0x1, 0x6c, 0x66, 0x3, 0x1f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x20}, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @cipso={0x86, 0x2e, 0x0, [{0x1, 0xfffffffffffffc22}, {0x7, 0x8, "59e978b9bf59"}, {0x0, 0x7, "209d64c4e7"}, {0x0, 0x9, "6646302b80cc8f"}, {0x7, 0x9, "8f194661c4439b"}, {0x0, 0x5, "72e1be"}]}, @ssrr={0x89, 0x23, 0xe1, [@broadcast, @loopback, @loopback, @empty, @loopback, @remote, @broadcast, @private=0xa010101]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000006700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000066c0)={&(0x7f0000006640)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x937a6133b5644598}, 0x48800) 04:37:37 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x18f5, &(0x7f0000000100)={0x0, 0xe2b4, 0x20, 0x3, 0x319}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 1737.088935][ T36] audit: type=1400 audit(1615783056.961:652): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9147 comm="syz-executor.3" [ 1737.171005][ T36] audit: type=1400 audit(1615783057.041:653): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9158 comm="syz-executor.2" [ 1737.196361][ T36] audit: type=1400 audit(1615783057.051:654): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9158 comm="syz-executor.2" 04:37:37 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x34}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:37 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698261202ff830a899bfe8538003a8f2636681f7d4482a80636dc182d1dac2a62bd760"], 0x2b) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) 04:37:37 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698265202ff830a837343391482a80636dc182d141a385bcd760fa9887ae48ab2e0277"], 0x2b) r1 = syz_io_uring_complete(0x0) r2 = memfd_create(&(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)={0x0, 0x4, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x100000000}, {r1, 0x0, 0x2000, 0x100000000}, {r2, 0x0, 0x8000}, {r3, 0x0, 0x1248bbc9996f6d24, 0xfffffffffffff000}]}) 04:37:37 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000003, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:37 executing program 4: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x2c}}, 0x8) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:37 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x1000000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:37 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2}, 0x78) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x0, 0x3, 0x1, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) write$sysctl(r3, &(0x7f0000000080)='6\x00', 0x2) 04:37:37 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698261202ff830a899bfe8538003a8f2636681f7d4482a80636dc182d1dac2a62bd760"], 0x2b) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) [ 1737.927027][ T36] audit: type=1400 audit(1615783057.801:655): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9172 comm="syz-executor.3" 04:37:37 executing program 4: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000280)={0x1000, "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"}) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:37 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x2c}}, 0x8) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) [ 1737.968759][ T36] audit: type=1400 audit(1615783057.821:656): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9173 comm="syz-executor.2" 04:37:37 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2}, 0x78) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x0, 0x3, 0x1, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) write$sysctl(r3, &(0x7f0000000080)='6\x00', 0x2) 04:37:37 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x3400}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1737.999351][ T36] audit: type=1400 audit(1615783057.821:657): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9173 comm="syz-executor.2" 04:37:37 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2}, 0x78) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x0, 0x3, 0x1, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) write$sysctl(r3, &(0x7f0000000080)='6\x00', 0x2) 04:37:37 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698261202ff830a899bfe8538003a8f2636681f7d4482a80636dc182d1dac2a62bd760"], 0x2b) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0x0) [ 1738.068216][ T36] audit: type=1400 audit(1615783057.921:658): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9191 comm="syz-executor.3" 04:37:38 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3fb, 0x300, 0x70bd2c, 0x25dfdbfe, "", [""]}, 0x10}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x111a, &(0x7f0000000100)={0x0, 0x7bbf, 0x21, 0x0, 0x1b1, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000280)) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x5b71, &(0x7f0000000000)={0x0, 0x0, 0x2, 0xfffffffd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:38 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x2c}}, 0x8) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:38 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x7ec0}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1738.121692][ T36] audit: type=1400 audit(1615783057.991:659): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9212 comm="syz-executor.3" 04:37:38 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x2000000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:38 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698261202ff830a899bfe8538003a8f2636681f7d4482a80636dc182d1dac2a62bd760"], 0x2b) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0x0) 04:37:38 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2}, 0x78) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x0, 0x3, 0x1, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 04:37:38 executing program 4: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x2f7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:38 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x2c}}, 0x8) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:38 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2}, 0x78) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) 04:37:38 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5987, &(0x7f0000000040)={0x0, 0x3, 0x10, 0x2, 0x80000, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_io_uring_setup(0x6501, &(0x7f0000000100)={0x0, 0x6ec2, 0x20, 0x1, 0x1fb, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000280)=0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x5, 0x0, r4, &(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x800, 0x6000, 0x1}, 0x5) syz_io_uring_setup(0x2cdb, &(0x7f0000000000)={0x0, 0xddc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:38 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698261202ff830a899bfe8538003a8f2636681f7d4482a80636dc182d1dac2a62bd760"], 0x2b) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) 04:37:38 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:38 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2}, 0x78) 04:37:38 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0xc100000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:38 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xc07e}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:38 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) socketpair(0x2b, 0x80000, 0xf1f9, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000340)) r5 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r6 = accept4$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_submit(r0, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r3, 0xa9, 0x0, 0x0, 0x0, 0x1}, 0x9) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:38 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:38 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698261202ff830a899bfe8538003a8f2636681f7d4482a80636dc182d1dac2a62bd760"], 0x2b) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) 04:37:38 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2}, 0x78) 04:37:38 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0xb02, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000240)=0x0, 0x0) r1 = syz_io_uring_complete(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, r1, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x131b, 0x2, 0x0, 0x2f0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:38 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7065400d70726f66698261202ff830a899bfe8538003a8f2636681f7d4482a80636dc182d1dac2a62bd760"], 0x2b) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) 04:37:39 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[], 0x2b) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:39 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:39 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x40000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:39 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:39 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x34000000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:39 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r0, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:39 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:39 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100)=0xfffffff7, 0x4) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:39 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x361100, 0x0) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:39 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:39 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r0, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:39 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:39 executing program 4: r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000002c0)={{0x0, @empty, 0x4e22, 0x3, 'sed\x00', 0x30, 0x7, 0x74}, {@multicast1, 0x4e20, 0x4, 0x4, 0x9, 0x1ff}}, 0x44) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100), 0x4) syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000005e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000005c40)=[{{&(0x7f0000000340)=@pppoe, 0x80, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, &(0x7f00000014c0)=""/4096, 0x1000}, 0x8}, {{&(0x7f00000024c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002540)=""/109, 0x6d}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/134, 0x86}], 0x3, &(0x7f0000002740)=""/178, 0xb2}, 0x8000}, {{&(0x7f0000002800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/205, 0xcd}, {&(0x7f0000003980)=""/201, 0xc9}, {&(0x7f0000003a80)=""/149, 0x95}, {&(0x7f0000003b40)=""/35, 0x23}, {&(0x7f0000003b80)=""/28, 0x1c}, {&(0x7f0000003bc0)=""/102, 0x66}, {&(0x7f0000003c40)=""/9, 0x9}, {&(0x7f0000003c80)=""/62, 0x3e}], 0x9}, 0x9}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003d80)=""/169, 0xa9}], 0x1}, 0x1}, {{&(0x7f0000003e80)=@isdn, 0x80, &(0x7f0000004240)=[{&(0x7f0000003f00)=""/219, 0xdb}, {&(0x7f0000004000)=""/59, 0x3b}, {&(0x7f0000004040)=""/141, 0x8d}, {&(0x7f0000004100)=""/129, 0x81}, {&(0x7f00000041c0)=""/40, 0x28}, {&(0x7f0000004200)=""/7, 0x7}], 0x6, &(0x7f00000042c0)=""/49, 0x31}, 0x1e}, {{&(0x7f0000004300)=@phonet, 0x80, &(0x7f0000004700)=[{&(0x7f0000004380)=""/30, 0x1e}, {&(0x7f00000043c0)=""/55, 0x37}, {&(0x7f0000004400)=""/245, 0xf5}, {&(0x7f0000004500)=""/147, 0x93}, {&(0x7f00000045c0)=""/154, 0x9a}, {&(0x7f0000004680)=""/86, 0x56}], 0x6, &(0x7f0000004780)=""/177, 0xb1}, 0x194}, {{&(0x7f0000004840)=@generic, 0x80, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/190, 0xbe}], 0x1}, 0xfffffffe}, {{&(0x7f00000049c0)=@xdp, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004a40)}, {&(0x7f0000004a80)=""/25, 0x19}], 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f0000004b00)=""/21, 0x15}, {&(0x7f0000004b40)=""/4096, 0x1000}], 0x2, &(0x7f0000005b80)=""/132, 0x84}, 0x7ff}], 0x9, 0x40000040, &(0x7f0000005ec0)={r2, r3+60000000}) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) 04:37:39 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:39 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x100000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:39 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:39 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, r0, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:39 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x3b9aca00}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:39 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x8}) syz_io_uring_setup(0x598a, &(0x7f0000000040)={0x0, 0x4, 0x10, 0x0, 0x3a1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x90af, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:39 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:39 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:39 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:40 executing program 0: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:40 executing program 2: syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:40 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) 04:37:40 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0xc07e0000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:40 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xca9a3b}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:40 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:40 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:40 executing program 2: syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:40 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 04:37:40 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) 04:37:40 executing program 2: syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:40 executing program 3: r0 = syz_io_uring_setup(0x2cde, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:40 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:40 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) 04:37:40 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0xffffff7f}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:40 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:41 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xf0ff7f}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair(0x4, 0x2, 0xa8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r2, &(0x7f0000000440)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000480)={@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0xa9, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:41 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) 04:37:41 executing program 3: r0 = syz_io_uring_setup(0x2cde, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:41 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:41 executing program 3: r0 = syz_io_uring_setup(0x2cde, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:41 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:41 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:41 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000540)={0x0, 0x2000, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) io_uring_setup(0x3990, &(0x7f00000005c0)={0x0, 0x768c, 0x4, 0x1, 0x30e, 0x0, r0}) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getpeername$ax25(r1, &(0x7f00000002c0)={{0x3, @null}, [@rose, @bcast, @remote, @remote, @remote, @rose, @default, @default]}, &(0x7f0000000340)=0x48) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="10001548", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf250400000095da6095f94b4292cb"], 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x2000000) syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) getpeername$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000640)=0x20) r2 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r2, 0x8000000) syz_io_uring_setup(0x25d0, &(0x7f0000000380)={0x0, 0x1db1, 0x2, 0x3, 0x30f, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 04:37:41 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x8, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:42 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x1000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:42 executing program 2: r0 = syz_io_uring_setup(0x598a, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:42 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x100010, r0, 0x10000000) 04:37:42 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:42 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:42 executing program 2: r0 = syz_io_uring_setup(0x598a, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:42 executing program 4: write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000140)='bic\x00', 0x4) syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2c04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x892400, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:42 executing program 2: r0 = syz_io_uring_setup(0x598a, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:42 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002108, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:42 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:43 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x2000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:43 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:43 executing program 4: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r0, 0x10000000) syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:43 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:43 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:43 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:43 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:43 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:43 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000100)={0xba, "a6e8c2f67a4fd31983b43d470f52ac25184460866db26ce8da6967763f8cd389982586dff65b3e82916755944ffa9c2de2461bf74a05e99e2460fe26f6d223bcdbf97076bedabb1c1adfb67c66f274bca2bc4ac060ce5612abadd12bb6d59c97ea932afa5efe47e729ddcff0aa46065848d507062ff0193345618da48d4b41bc88d64ca1d8711f3868f9d1543df07fb0f758d6a7d8c8c9383ad5406e225dc7d671220e4dc8c230b3299540dfe4b14ee2e3512d631e530f3c43f0"}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x810, r0, 0x0) syz_io_uring_complete(r1) 04:37:43 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0xc0, &(0x7f0000000100)=0x80000001, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:43 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x20) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:43 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:44 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x34000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:44 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:44 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{}, [@func, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:44 executing program 4: bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10) r0 = syz_io_uring_setup(0x31e6, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x75f3, &(0x7f0000000140)={0x0, 0x83ce, 0x20, 0x1, 0x141, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) r5 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) r6 = socket$l2tp(0x2, 0x2, 0x73) pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f00000003c0)={{0xff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'sh\x00', 0x2d, 0x8, 0x2c}, {@rand_addr=0x64010102, 0x4e21, 0x1, 0x10000, 0x3, 0x7}}, 0x44) syz_io_uring_submit(r1, r3, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@ethernet={0x1, @local}}, 0x1) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:44 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:44 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000180)=@framed={{}, [@func, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:44 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:44 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:44 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=@framed={{}, [@func]}, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:44 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) 04:37:44 executing program 1: r0 = socket(0x1a, 0x1, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x1000000000000146}}], 0x2, 0x40010001, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:44 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)=0x0, 0x0) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) syz_io_uring_submit(r0, r2, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd=r3, 0x6, &(0x7f0000000280)="333683a32d7643dc326baabd5d354e6cb3c737e0ab11a19350bf8d244b33c73dd2d95a8d9ad8506a1f4092095bc4b88520898eec58a4c06801849463e058f43c92bddd7ea07d99bb88fd53fee126c58ed9c60ff2f663125a0bd615e50ca800d5e38a0c9b9c6d14ca911e58cbc7c68fee90f89ea8ba", 0x75, 0x2}, 0x8) syz_io_uring_setup(0x2cdc, &(0x7f0000000000)={0x0, 0x9b04, 0x2, 0x1, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r1, 0x0) r5 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) accept(r5, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f00000003c0)=0x80) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) syz_io_uring_submit(r0, r6, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x9) 04:37:45 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x3b9aca00}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:45 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:45 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 04:37:45 executing program 1: r0 = socket(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:45 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x79c5, &(0x7f0000000100)={0x0, 0xbb66, 0x0, 0x0, 0xef, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x810, r0, 0x0) 04:37:45 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040)={0x0, 0xf45d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, 0x0, 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:45 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 04:37:45 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:45 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r1 = io_uring_setup(0x3e97, &(0x7f0000000100)={0x0, 0xd128, 0x10, 0x0, 0x189, 0x0, r0}) syz_io_uring_setup(0x82cde, &(0x7f0000000000)={0x0, 0xb297, 0x0, 0x0, 0x10000000, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 04:37:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, 0x0, 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x7ffff000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:46 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 04:37:46 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) r1 = accept(r0, &(0x7f0000000000)=@ieee802154={0x24, @long}, &(0x7f0000000080)=0x80) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x5, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) 04:37:46 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000300)=0x2d, 0x0, 0x4) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:46 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, 0x0, 0xec, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x4, &(0x7f0000000200)=""/4, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:46 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r0, 0x0) 04:37:46 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:46 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000100), 0x4) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:46 executing program 1: r0 = socket(0x10, 0x80000, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xc07e0000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:46 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:46 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r0, 0x0) 04:37:46 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1, {0x1}}, 0x5) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3, 0x33, 0x0, 0x10001, 0x2, 0x1}, 0xcd) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:46 executing program 4: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self\x00', 0x673c2aaf4660fa0f, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x64100, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000140)=0x3, 0x2) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x30, r2, 0x10000000) r4 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf2506000000080002000600000008000300070000004c0001800600010002000000060001000200000005000200ff00000014000400fe8000000000000000000000000000bb080006000700000014000400fe8000000000000000000000000000aa1800018014000400fc02000000000000000000000000000008000300040000000c000180060001000200000024000180080007"], 0xdc}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:46 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xffffff7f}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:46 executing program 3: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r0, 0x0) 04:37:46 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) [ 1746.547451][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:37:46 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:46 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f0000000180)={0x0, 0xf27a, 0x10, 0x0, 0x200}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000140)=0x10) 04:37:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:46 executing program 3: syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) 04:37:46 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x7ffffffff000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:46 executing program 3: syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) 04:37:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0xfffffff8}, 0x10, 0xffffffffffffffff}, 0x78) 04:37:46 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:46 executing program 4: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)={0x4, 0x5, 0x6, 0x0, 0x7f, 0x81, 0x4, 0x7f, 0x7f, 0x1, 0x9, 0x1, 0x0, 0x8000, 0x1, 0xef, 0x7, 0x0, 0x3, [], 0x9, 0x4}) syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x75f6, &(0x7f0000000140)={0x0, 0xf5af, 0x20, 0x0, 0x1ee, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r1, 0x0) r3 = syz_io_uring_complete(r2) syz_io_uring_setup(0x2073, &(0x7f0000000300)={0x0, 0xdc8a, 0x8, 0x3, 0x18d, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 04:37:46 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000002a40)=""/32, 0x20}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/151, 0x97}, {&(0x7f0000001200)=""/31, 0x1f}, {&(0x7f0000001240)=""/149, 0x95}, {&(0x7f0000001300)=""/92, 0x5c}, {&(0x7f0000001380)=""/214, 0xd6}], 0x8, &(0x7f0000001500)=""/73, 0x49}, 0x6}, {{&(0x7f0000001580)=@ieee802154, 0x80, &(0x7f0000002900)=[{&(0x7f0000001600)=""/71, 0x47}, {&(0x7f0000001680)=""/244, 0xf4}, {&(0x7f0000001780)=""/23, 0x17}, {&(0x7f00000017c0)=""/53, 0x35}, {&(0x7f0000001800)=""/255, 0xff}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x6, &(0x7f0000002980)=""/56, 0x38}, 0x7}, {{&(0x7f00000029c0), 0x80, &(0x7f0000002a40), 0x0, &(0x7f0000002a80)=""/28, 0x1c}, 0x4}], 0x3, 0x40002102, &(0x7f000000b6c0)) recvmmsg(r0, &(0x7f000000ca40)=[{{&(0x7f0000001140)=@llc, 0x80, &(0x7f00000011c0)=[{&(0x7f0000002c40)=""/66, 0x42}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000002cc0)=""/157, 0x9d}], 0x3, &(0x7f0000002d80)=""/190, 0xbe}, 0xfff}, {{&(0x7f0000002e40)=@phonet, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002ec0)=""/85, 0x55}], 0x1, &(0x7f0000002f80)=""/2, 0x2}, 0x8000}, {{&(0x7f0000002fc0)=@nfc, 0x80, &(0x7f00000053c0)=[{&(0x7f0000003040)=""/7, 0x7}, {&(0x7f0000003080)=""/96, 0x60}, {&(0x7f0000003100)=""/158, 0x9e}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/198, 0xc6}, {&(0x7f00000052c0)=""/240, 0xf0}], 0x7, &(0x7f0000005440)=""/96, 0x60}, 0xff}, {{&(0x7f00000054c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000007700)=[{&(0x7f0000005540)=""/222, 0xde}, {&(0x7f0000005640)=""/48, 0x30}, {&(0x7f0000005680)=""/70, 0x46}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/4096, 0x1000}], 0x5, &(0x7f0000007780)=""/4096, 0x1000}, 0x8000}, {{0x0, 0x0, &(0x7f0000008a80)=[{&(0x7f0000008780)=""/1, 0x1}, {&(0x7f00000087c0)=""/5, 0x5}, {&(0x7f0000008800)=""/236, 0xec}, {&(0x7f0000008900)=""/28, 0x1c}, {&(0x7f0000008940)=""/156, 0x9c}, {&(0x7f0000008a00)=""/91, 0x5b}], 0x6}, 0x40}, {{&(0x7f0000008b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000009f40)=[{&(0x7f0000008b80)=""/106, 0x6a}, {&(0x7f0000008c00)=""/8, 0x8}, {&(0x7f0000008c40)=""/189, 0xbd}, {&(0x7f0000008d00)=""/4096, 0x1000}, {&(0x7f0000009d00)=""/193, 0xc1}, {&(0x7f0000009e00)=""/168, 0xa8}, {&(0x7f0000009ec0)=""/76, 0x4c}], 0x7, &(0x7f0000009fc0)=""/105, 0x69}, 0x1}, {{&(0x7f000000a040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f000000a1c0)=[{&(0x7f000000a0c0)=""/5, 0x5}, {&(0x7f000000a100)=""/136, 0x88}], 0x2, &(0x7f000000a200)=""/4096, 0x1000}, 0x4}, {{&(0x7f000000b200)=@can, 0x80, &(0x7f000000b4c0)=[{&(0x7f000000b280)=""/56, 0x38}, {&(0x7f000000ccc0)=""/208, 0xd0}, {&(0x7f000000b3c0)=""/189, 0xbd}, {&(0x7f000000b480)=""/12, 0xc}], 0x4, &(0x7f000000b500)=""/125, 0x7d}, 0x81}, {{0x0, 0x0, &(0x7f000000b700)=[{&(0x7f000000b580)=""/137, 0x89}, {&(0x7f000000b7c0)=""/4096, 0x1000}, {&(0x7f000000c7c0)=""/243, 0xf3}, {&(0x7f000000c8c0)=""/170, 0xaa}, {&(0x7f000000b640)=""/115, 0x73}], 0x5, &(0x7f000000c980)=""/135, 0x87}, 0x37db}], 0x9, 0x12100, &(0x7f000000cc80)) bind$tipc(r1, 0x0, 0x0) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:46 executing program 3: syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) 04:37:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 04:37:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x4000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:46 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:46 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000300)=0x2d, 0x0, 0x4) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:46 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0x7d0a, 0x0, 0x0, 0x36b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r0 = semget(0x3, 0x3, 0x300) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = getuid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000280)={{0x0, 0xee00, 0xffffffffffffffff, r1, 0x0, 0x44, 0x80}, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x18}) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x204040, 0x0) 04:37:46 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair(0x4, 0x2, 0xa8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r2, &(0x7f0000000440)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000480)={@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0xa9, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:46 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:46 executing program 4: accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) r0 = syz_io_uring_setup(0x7f29, &(0x7f0000000140)={0x0, 0xd65c, 0xf64d8f3ee5653bfc, 0x3, 0x9a}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x598a, &(0x7f0000000300)={0x0, 0x430c, 0x4, 0x0, 0x353, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:46 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000300)=0x2d, 0x0, 0x4) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x10000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:47 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x800, &(0x7f0000000040)=0x2) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:47 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:47 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair(0x4, 0x2, 0xa8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r2, &(0x7f0000000440)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000480)={@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0xa9, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:47 executing program 4: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xb, 0x100010, r0, 0x8000000) syz_io_uring_setup(0x42e04, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000100), 0x0, 0x4) 04:37:47 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000300)=0x2d, 0x0, 0x4) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:47 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:47 executing program 4: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x3, 0x2) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x6990, &(0x7f0000000100)={0x0, 0x73c7, 0x10, 0x2, 0x394}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:47 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000300)=0x2d, 0x0, 0x4) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:47 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair(0x4, 0x2, 0xa8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r2, &(0x7f0000000440)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000480)={@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0xa9, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) [ 1747.812486][ T9874] ================================================================== [ 1747.820612][ T9874] BUG: KCSAN: data-race in netlink_recvmsg / netlink_recvmsg [ 1747.827974][ T9874] [ 1747.830290][ T9874] write to 0xffff88812b12f320 of 8 bytes by task 9893 on cpu 0: [ 1747.837921][ T9874] netlink_recvmsg+0x130/0x7d0 [ 1747.842683][ T9874] __sys_recvfrom+0x1d7/0x2a0 [ 1747.847360][ T9874] __x64_sys_recvfrom+0x74/0x90 [ 1747.852212][ T9874] do_syscall_64+0x39/0x80 [ 1747.856625][ T9874] entry_SYSCALL_64_after_hwframe+0x44/0xae 04:37:47 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:47 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) [ 1747.862525][ T9874] [ 1747.864837][ T9874] read to 0xffff88812b12f320 of 8 bytes by task 9874 on cpu 1: [ 1747.872369][ T9874] netlink_recvmsg+0xef/0x7d0 [ 1747.877044][ T9874] ____sys_recvmsg+0x15d/0x310 [ 1747.881808][ T9874] do_recvmmsg+0x34c/0x9e0 [ 1747.886217][ T9874] __x64_sys_recvmmsg+0xe6/0x150 [ 1747.891160][ T9874] do_syscall_64+0x39/0x80 [ 1747.895574][ T9874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1747.901474][ T9874] [ 1747.903790][ T9874] Reported by Kernel Concurrency Sanitizer on: 04:37:47 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xca9a3b00000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) [ 1747.909921][ T9874] CPU: 1 PID: 9874 Comm: syz-executor.1 Not tainted 5.12.0-rc2-syzkaller #0 [ 1747.918590][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1747.928638][ T9874] ================================================================== 04:37:48 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="737902740000000000000000", @ANYRES32=0x0, @ANYBLOB="0080800000000064000000034725001c00680000102f9078f032ffffffffffffc7e0000002000000"]}) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40}, 0x80080) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) 04:37:48 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000300)=0x2d, 0x0, 0x4) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:48 executing program 4: syz_io_uring_setup(0x75e, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, &(0x7f00000002c0)=""/240, 0xf0}, 0x7fffffff}, {{&(0x7f00000003c0)=@phonet, 0x80, &(0x7f0000001880)=[{&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/43, 0x2b}, {&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f00000005c0)=""/71, 0x47}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/194, 0xc2}, {&(0x7f0000001800)=""/77, 0x4d}], 0x8, &(0x7f0000001900)=""/217, 0xd9}, 0x3}], 0x2, 0x22022, &(0x7f0000001a80)={0x77359400}) syz_io_uring_setup(0x2e04, &(0x7f0000001b00), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000001ac0)=0x401, 0x0, 0x4) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:48 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair(0x4, 0x2, 0xa8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f0000000440)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:48 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:48 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:48 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x810, r0, 0x10000000) 04:37:48 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair(0x4, 0x2, 0xa8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f0000000440)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:48 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:48 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xdc90, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:48 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair(0x4, 0x2, 0xa8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f0000000440)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:48 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xf0ff7f00000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) r1 = socket(0x29, 0x2, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={[], 0x12}}, 0x8) 04:37:49 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:49 executing program 4: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0xc180, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x100010, r1, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r0, 0x8000000) syz_io_uring_setup(0x77fb, &(0x7f0000000140)={0x0, 0x1857, 0x1, 0x2, 0x370, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x180, 0x40, 0x23456}, 0x475e5bc5) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000003c0)={{0x16, @private=0xa010102, 0x4e23, 0x3, 'nq\x00', 0x10, 0x92, 0x51}, {@private=0xa010100, 0x4e23, 0x0, 0x8000, 0x9, 0xffffffff}}, 0x44) 04:37:49 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:49 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair(0x4, 0x2, 0xa8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f0000000440)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:49 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:49 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:49 executing program 4: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f00000002c0)=""/10) syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x100, 0x70bd29, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x804) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:49 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:49 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair(0x4, 0x2, 0xa8, &(0x7f0000000400)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x0, 0x3938700}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_flags}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000001, 0x0, 0x4, 0x40, 0x8, 0x1, 0x1}, {0x80000008, 0x1, 0x5, 0x10001, 0x9f, 0x57f, 0x5}]}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:49 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xf0ffffff7f0000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:49 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x15e6, &(0x7f0000000280)={0x0, 0x46a5, 0x4, 0x2, 0x6}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x140150, r0, 0x8000000) r1 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) io_uring_setup(0x2706, &(0x7f0000000100)={0x0, 0xf73c, 0x1, 0x0, 0x3b5, 0x0, r1}) syz_io_uring_setup(0x46b0, &(0x7f0000000000)={0x0, 0x86c5, 0x0, 0x9, 0x396}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:49 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x520c, &(0x7f00000002c0)={0x0, 0x995e, 0x8, 0x1, 0x27d, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:49 executing program 0: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:49 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:49 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:49 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:49 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000400)={0x400, 0x3, 0xfffffffffffffff8, 0x4}, &(0x7f0000000440)) r0 = semget(0x3, 0x3, 0x300) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x426001, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf250600000014002000ff01000000000000000000000000000105ed0500df00000008001900ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000805) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000100)=""/113) r3 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f2, 0x800, 0x70bd26, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x480d1}, 0x810) 04:37:49 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x100000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) bind$bt_sco(r1, &(0x7f0000000000), 0x8) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:49 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x4688, &(0x7f0000000100)={0x0, 0x4af7, 0x0, 0x1, 0x212}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000180), &(0x7f0000000280)) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:49 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:49 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:49 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x16ab, 0x2, 0x0, 0x205}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:49 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x200000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f00000002c0)=""/4100, 0x1004}], 0x2}}], 0x2, 0x0, &(0x7f0000000040)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) write$sysctl(r2, &(0x7f0000000080)='0\x00', 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) accept(r1, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:49 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:49 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:49 executing program 4: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x67, 0x3, {{0xd, 0x4, 0x1, 0x9, 0x34, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@cipso={0x86, 0xf, 0xffffffffffffffff, [{0x5, 0x9, "eb957f093fde5a988d0fec0efbffffff"}]}, @cipso={0x86, 0x21, 0x2, [{0x6, 0x8, "a3868a0042f7"}]}, @ra={0x94, 0x0, 0x1}]}}}}}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000a380)={0x0, @loopback}, &(0x7f000000a3c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f000000e540)={'gretap0\x00', &(0x7f000000e4c0)={'tunl0\x00', r2, 0x20, 0x10, 0x50, 0x20, {{0xc, 0x4, 0x2, 0x4, 0x30, 0x65, 0x0, 0x81, 0x2f, 0x0, @broadcast, @empty, {[@generic={0x89, 0x7, "0c44e0e35c"}, @generic={0x86, 0xb, "3f5d3c8df81dcd3c54"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f000000e680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000e640)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf2502000000080003000200000008000300000000000800030003000000080002000700000008000200070000005800018008000700", @ANYRES32=r4, @ANYBLOB="14000400fc02000000000000000000000000000114000400fc0200000000000000000014000400fe8000000000000000000000000000aa080007000000000000", @ANYRES32=r5, @ANYBLOB="08000700bf1cb2c7632b5710a5006d", @ANYRES32=r2, @ANYRES16=r5], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41469da224702935) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, 0x0) r6 = getuid() getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)={{0x3, 0xee00, 0xee00, r6, r7, 0x5d, 0x9}, 0x4, 0x2eb, 0x0, 0x0, 0x0, 0x0, 0x22}) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000100)) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000400), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$KVM_SMI(r3, 0xaeb7) 04:37:49 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:49 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1b9, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:49 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x3400000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:50 executing program 2: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:50 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x98, &(0x7f0000000500)=0x7fff, 0x0, 0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:50 executing program 0: syz_io_uring_setup(0x71e6, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:50 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040)={0x0, 0x27bd, 0x0, 0x0, 0x13c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004841) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:50 executing program 3: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x28}}, 0x41000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2730761545500833c9bcf80e7b58d760000000", @ANYRES16=r2, @ANYBLOB="08002abd7000fddbdf250200000008000b000200000008000b0004000000050022000100000005000d000100000006000e00000000000c001000000000000000000008000b0001000000050013000300000006001d0004000000"], 0x60}, 0x1, 0x0, 0x0, 0x24004004}, 0x4000001) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r2, 0x10, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x20008000) recvmmsg(r3, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) r5 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00808000000010b18064000000034725001c00680000102f90780a010102ffffffff8307c7e00000"]}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r3) 04:37:50 executing program 0: syz_io_uring_setup(0x71e6, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:50 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x8000000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:50 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 04:37:50 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:50 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:50 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:50 executing program 0: syz_io_uring_setup(0x71e6, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:50 executing program 4: r0 = syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x52d1, &(0x7f0000000100)={0x0, 0x8824, 0x2, 0x1, 0x28f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002000}, 0x10000) 04:37:50 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) 04:37:50 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:50 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) 04:37:50 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:50 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f000000b7c0)=""/102400, 0x19000}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xc07e000000000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:51 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = io_uring_setup(0x62b9, &(0x7f0000000100)={0x0, 0xc45e, 0x4, 0x3, 0x209}) syz_io_uring_setup(0x3f5, &(0x7f0000000280)={0x0, 0xd20, 0x1, 0x0, 0x3b8, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000300)) 04:37:51 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:51 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) 04:37:51 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:51 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:51 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:51 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), 0x0) 04:37:51 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040)={0x0, 0xc208, 0x0, 0x0, 0x80000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x80, 0x0) syz_io_uring_setup(0x2bfc, &(0x7f00000001c0)={0x0, 0x8dbd, 0x1, 0x0, 0x320}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:51 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0xffffff7f00000000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:51 executing program 1: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080)=0x4, 0x4) r0 = socket(0x1a, 0x1, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x216100, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f2, 0x200, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000011}, 0x24008015) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0xfff, &(0x7f0000000040)=0x2) 04:37:51 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x0, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:51 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:51 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), 0x0) 04:37:51 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x509400, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000280)={0x4, 0x1}) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) syz_io_uring_setup(0x4c46, &(0x7f00000002c0)={0x0, 0xdc5e, 0x0, 0x0, 0x1a3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) syz_io_uring_setup(0x598a, &(0x7f0000000100)={0x0, 0x8f2e, 0x0, 0x0, 0x2000000, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r3 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r3, 0x8000000) r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r4, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r3, 0x8000000) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:51 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x0, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:51 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) 04:37:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:51 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), 0x0) 04:37:51 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x105b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xd, 0x4050, r0, 0x8000000) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x8000) mmap$usbmon(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x6, 0x810, r1, 0x7) io_uring_setup(0x2ec, &(0x7f0000000140)={0x0, 0x593e, 0x20, 0x0, 0x23d}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000640)={{&(0x7f00000005c0)={'GENERAL\x00', {&(0x7f0000000480)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0x81}, {&(0x7f00000003c0)=@adf_hex={@bank={'Bank', '1', 'CoreAffinity\x00'}}}}}, {&(0x7f0000000540)={'Accelerator\x00'}}}}}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000380)={&(0x7f0000000280), &(0x7f00000002c0)=""/156, 0x9c}) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000680), 0x0, 0x4) 04:37:51 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x0, 0x3, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:51 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) r1 = socket(0x86c554bcc866b8a6, 0x80000, 0xc52e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1004040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x1c}}, 0x4000) 04:37:51 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 04:37:52 executing program 2: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x797f, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) 04:37:52 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:52 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:52 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x0, 0x3938700}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_flags}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000001, 0x0, 0x4, 0x40, 0x8, 0x1, 0x1}, {0x80000008, 0x1, 0x5, 0x10001, 0x9f, 0x57f, 0x5}]}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:52 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 04:37:52 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040)={0x0, 0x18e6, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_complete(r0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6, &(0x7f0000000180)=0x80) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x20, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) 04:37:52 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 04:37:52 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:52 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:52 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null}) 04:37:52 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000040)={0x2}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0x3}) r2 = socket(0x14, 0x2, 0x0) recvmmsg(r2, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f0000000080)={0x77359400}) 04:37:52 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000100)='\'\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200040, 0x0) io_uring_setup(0x6311, &(0x7f0000000280)={0x0, 0x172a, 0x4, 0x3, 0x1f8, 0x0, r0}) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x2b7, 0x7ff, 0x0, 0x4, 0x1}, 0x5) syz_io_uring_complete(r1) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:52 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x0, 0x3938700}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_flags}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000001, 0x0, 0x4, 0x40, 0x8, 0x1, 0x1}, {0x80000008, 0x1, 0x5, 0x10001, 0x9f, 0x57f, 0x5}]}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:52 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:52 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:52 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x10}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:52 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:52 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:52 executing program 1: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x1c}}, 0x24040801) r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4084, 0xff4}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:52 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x13, 0xffffffffffffffff, 0xfff) 04:37:53 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:53 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000100)={0x4, 0x5, [{0x10000, 0x0, 0x6}, {0x0, 0x0, 0xae}, {0x800, 0x0, 0x4}, {0x7f3b, 0x0, 0x7}]}) 04:37:53 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x0, &(0x7f00000002c0)) 04:37:53 executing program 4: syz_io_uring_setup(0x5988, &(0x7f0000000040)={0x0, 0x79e6, 0x0, 0x0, 0x369}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x37f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000100)=0x7fff, 0x4) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:53 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x0, 0x3938700}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_flags}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000001, 0x0, 0x4, 0x40, 0x8, 0x1, 0x1}, {0x80000008, 0x1, 0x5, 0x10001, 0x9f, 0x57f, 0x5}]}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:53 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:53 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x0, &(0x7f00000002c0)) 04:37:53 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x34}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:53 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x0) 04:37:53 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) r1 = socket(0x28, 0x5, 0x860) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f00000001c0)=""/26, 0x1a}], 0x3, &(0x7f0000000240)=""/3, 0x3}, 0xc7e6}, {{&(0x7f0000000280)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)=""/227, 0xe3}], 0x5}, 0x3}, {{&(0x7f0000000680)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/244, 0xf4}], 0x1, &(0x7f0000000840)=""/17, 0x11}, 0x42}], 0x3, 0x4020, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000cc0)=@bpq0='bpq0\x00', 0x10) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:53 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x0, &(0x7f00000002c0)) 04:37:53 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:53 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x810, r0, 0x0) socketpair(0x22, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000003c0)=0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x5, 0x2) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000340)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/138, 0x8a}) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:53 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:53 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x0, 0x3938700}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_flags}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000001, 0x0, 0x4, 0x40, 0x8, 0x1, 0x1}, {0x80000008, 0x1, 0x5, 0x10001, 0x9f, 0x57f, 0x5}]}) socketpair(0x2a, 0x0, 0x0, 0x0) 04:37:53 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x3400}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:53 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), 0x0) 04:37:53 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x2fdc, &(0x7f0000000100)={0x0, 0x42c1, 0x4, 0x3, 0x1d7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000002c0)) 04:37:53 executing program 3: syz_io_uring_setup(0x71e6, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:53 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_complete(r0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x10000, 0x3, 0x100, 0x101]}) 04:37:53 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), 0x0) 04:37:54 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) socketpair(0x5, 0x80000, 0x7fff, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x3c}}, 0x0) r5 = accept(0xffffffffffffffff, 0x0, 0x0) socket(0x5, 0x80000, 0x2) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x66, 0x3, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast}}}}) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x11}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 04:37:54 executing program 3: syz_io_uring_setup(0x71e6, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:54 executing program 0: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), 0x0) 04:37:54 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x7ec0}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:54 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x305}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x3279, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0xb4, 0xff, 0x7fff]}) r0 = semget(0x3, 0x3, 0x300) io_uring_setup(0x7cc5, &(0x7f0000000300)={0x0, 0xfc5c, 0x14, 0x2, 0x133}) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x3, 0x3, 0x300) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000380)=""/122) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000100)=""/34) 04:37:54 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x0, 0x3938700}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_flags}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x80000001, 0x0, 0x4, 0x40, 0x8, 0x1, 0x1}, {0x80000008, 0x1, 0x5, 0x10001, 0x9f, 0x57f, 0x5}]}) 04:37:54 executing program 3: syz_io_uring_setup(0x71e6, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:54 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 04:37:54 executing program 4: ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000280)={[0x8, 0x4, 0x0, 0x100, 0x0, 0x3, 0x0, 0x8, 0x40, 0x5, 0xff, 0x95e2, 0x2, 0x51, 0x6, 0xd36, 0x8, 0x7fffffff, 0x7, 0x4, 0x7, 0x4, 0xfffffbaf, 0xff, 0x7ff, 0x80000000, 0x80000001, 0x8c, 0xb5c, 0x401, 0x10000, 0x3, 0xfffffff8, 0x0, 0x2, 0x41fe, 0x1, 0x7, 0x51, 0x0, 0x449, 0xfffeffff, 0xaf4c, 0x0, 0x9, 0x4, 0xffff, 0x4, 0x8f55, 0x100, 0x3, 0x7f, 0x5, 0x70000000, 0x4988, 0x4, 0x44d6, 0xdcb7, 0xffff, 0x5, 0x10001, 0x1, 0x24f, 0xa90, 0x9, 0x3836, 0x4, 0x2, 0x7, 0x10000, 0x2, 0x1f, 0x1, 0x1, 0x5, 0x1, 0x1, 0xa6, 0x180, 0x1109, 0x101, 0x5, 0x2, 0x5, 0x3, 0x0, 0x5, 0x0, 0xffff5467, 0xe2, 0x2, 0x0, 0x80, 0x80000001, 0x67e6, 0x9, 0x800, 0x6, 0xfc000000, 0x234af48e, 0x68ec, 0x3, 0x6, 0x3, 0x6, 0x35a, 0x6, 0x5, 0x101, 0xd8, 0x20, 0xa1, 0x8, 0xff, 0x9, 0x2, 0x1000, 0x9, 0x6, 0x8, 0x0, 0x400, 0x1, 0x2, 0x5, 0xe6f, 0x400000, 0x64346c2, 0x7, 0x10001, 0x200, 0xffff, 0x8, 0x5fc7, 0x7f, 0x40, 0xfa, 0x101, 0x0, 0x1, 0x1, 0xa2, 0x4, 0x7, 0x80000000, 0x3, 0x1, 0x9, 0x2, 0x1, 0x200, 0x0, 0x4, 0x2, 0x1f, 0x1, 0x80000000, 0x2cff73d4, 0x4, 0x2, 0x1000, 0x6f000000, 0x2, 0xccd96cb, 0x200, 0x2, 0x0, 0x6, 0x8, 0x8, 0x2eb3, 0x0, 0x9, 0x380000, 0x1, 0xb1, 0x4, 0x80000000, 0x122, 0x3, 0x1f, 0x1, 0x101, 0x3f, 0xd60, 0x9, 0x4, 0xfffffffd, 0x3f, 0x6, 0x9, 0x153a, 0x7ff, 0x100, 0x4, 0x7, 0x10001, 0xfffffffd, 0xc7, 0x9, 0x9, 0x3ff, 0x80000001, 0x40, 0xd8, 0x8, 0x9, 0x8, 0x4, 0x0, 0x9, 0x7ff, 0x7fff, 0x80, 0x9, 0x5, 0x9, 0x2, 0x7, 0x7fffffff, 0xfff, 0x21, 0x101, 0x3ff, 0x3ff, 0x7, 0x8000, 0x0, 0x80, 0x3f, 0x401, 0x7, 0xffff, 0x3, 0x2, 0x1f, 0x2, 0x0, 0x9, 0x27b, 0x8, 0x1f, 0xa23, 0xc7, 0x1f, 0x4, 0x80000001, 0x400, 0xfc, 0x3ff, 0x3ff, 0x100, 0x401, 0xfffff731, 0xedb3, 0x0, 0x1, 0x10001, 0x9, 0x8000, 0x159, 0x806, 0xa22, 0x7f, 0x2, 0x7, 0xa5, 0xbb, 0x200, 0x0, 0x0, 0x6, 0x1b07, 0x5, 0x5, 0x8, 0x3f, 0xf1, 0x1, 0x4, 0x7ff, 0x40, 0x10000, 0x8, 0xffffffff, 0x660505ba, 0x4, 0x2b, 0x0, 0x0, 0x800, 0x10001, 0x4be9, 0x10001, 0x6, 0x1, 0x2d63, 0xeba, 0xfffeffff, 0x25, 0x10000, 0x1, 0x100, 0x3, 0x2, 0x8000, 0x400, 0x401, 0xed16, 0x9, 0x2, 0xfffffffa, 0x1, 0x1ff, 0x7ff, 0x2, 0x4df7, 0x100, 0x3, 0x0, 0x1f, 0x1e, 0x7, 0x5, 0x0, 0xfffffffe, 0x5, 0x7, 0x7fe, 0x9, 0x34e, 0x5, 0x878, 0x1, 0x7, 0x1, 0xffff, 0x401, 0x3, 0x4, 0x200, 0x1bc, 0xfa8, 0x3, 0x9, 0x8, 0x81, 0x8000, 0x0, 0x1000, 0x80, 0x1f, 0x8001, 0x2, 0x8001, 0x9, 0x80000000, 0x7889, 0x4, 0x8001, 0xf38, 0x1, 0x1b3, 0x3, 0x9, 0x1c, 0x1, 0x4, 0x10001, 0x1f, 0x9, 0x9, 0x5, 0x5, 0x5c, 0x8, 0x28000000, 0x7, 0x2, 0x6, 0x6, 0xffff, 0x3, 0x2dfe, 0xff, 0x8, 0x800, 0x5, 0x5, 0x9, 0x2, 0x9, 0x0, 0x7, 0x1, 0x4, 0x5, 0x4, 0x80000001, 0x80, 0x6, 0x47c1, 0x9, 0x400, 0x0, 0x5, 0x3ff, 0x9, 0xfffffff7, 0x4, 0xffffffff, 0x4, 0x1000, 0xfffffff7, 0x401, 0x3, 0x4, 0x1f, 0x3c4, 0x0, 0x8001, 0x8557, 0x3000000, 0x7, 0x800000, 0xea55, 0x1fe0d25f, 0x58e273ff, 0x4, 0xd7, 0x7fffffff, 0x2, 0x7ff, 0xff, 0x1, 0x9, 0x8000, 0x9, 0x7, 0x800, 0x1ff, 0xc72, 0x4, 0x9, 0x5, 0xffff, 0x1, 0x1, 0x3ff, 0x401, 0xfff, 0x1, 0x94, 0x10001, 0x4, 0xc0, 0x7, 0xffffffc0, 0x24000000, 0xffffffff, 0x7, 0x84e9, 0x0, 0x8, 0x6, 0x8001, 0x1, 0x5, 0xfff, 0x7, 0x3, 0xb2, 0x4, 0x4, 0x1ff, 0xffff, 0x3, 0x1, 0x7, 0x9000000, 0x6, 0x5, 0x1, 0x7, 0x1ff, 0x300000, 0x7, 0x4, 0xef6, 0x4, 0x2, 0x2, 0x64ca, 0xfff, 0x8, 0x1, 0x4, 0x200, 0x0, 0x10001, 0x8, 0x3, 0x5, 0x0, 0x2, 0x8001, 0x80000000, 0x4, 0x8, 0x400, 0x3, 0x7fffffff, 0x5, 0x2, 0x8, 0x331, 0x6, 0x401, 0x1, 0x16f5, 0x4388, 0x2, 0xad0, 0x80000000, 0x9, 0x10000, 0xffffffc0, 0x5, 0xbfc, 0x3ff, 0x7, 0xba4, 0x4, 0xff, 0x4, 0xce0, 0x6, 0x101, 0x4, 0x4, 0x3ff, 0x80000001, 0x10001, 0x8, 0x49, 0x3, 0x0, 0x9, 0x8, 0xda, 0x6, 0x4, 0x4, 0x0, 0x1, 0x6, 0x3, 0x9, 0x9, 0x3, 0x0, 0xff, 0x5, 0x8, 0x800, 0x7ff, 0x7fffffff, 0x4, 0x5, 0x8, 0x5, 0x0, 0xbcba, 0x80000000, 0x5, 0x4, 0x0, 0x9, 0x6, 0x7, 0x4, 0x7fffffff, 0xbb, 0x8, 0x5, 0x76a7, 0x8, 0x7fffffff, 0x9b, 0x8, 0x0, 0x46f2, 0x0, 0x4, 0x80000000, 0xbae, 0x1, 0x6d0, 0x2, 0x1, 0x0, 0x8, 0x5, 0x1, 0x3, 0xfffffdfd, 0xffffffea, 0x45c3, 0x6, 0xd2, 0x80000001, 0x1, 0x3, 0x0, 0xffffffe1, 0x40a7513b, 0x2, 0x2, 0x4, 0x3ff, 0x7, 0x5, 0x91bf, 0x3f, 0x40bd, 0x1e, 0x10001, 0x100, 0x5, 0x7, 0x400000, 0x8, 0x0, 0x7, 0x1, 0xa0, 0x3, 0x4, 0x2, 0x578, 0x1000, 0x80000001, 0x0, 0x688, 0x7, 0x1, 0x7, 0x2, 0x4, 0x8000, 0x3, 0x5, 0x200, 0x3, 0xfff, 0x0, 0x9, 0x7, 0x9, 0x5, 0x7, 0x401, 0x29, 0x3f, 0x8, 0x1, 0x1, 0x0, 0xd45, 0x2, 0x8, 0x2, 0x6, 0x10000, 0x1, 0x1, 0x101, 0x5, 0x8000, 0x0, 0x4, 0x3, 0x6, 0x101, 0x83, 0xfffffff8, 0xed3, 0x0, 0x5, 0xfff, 0x20, 0x5, 0x2, 0xffffffc1, 0x5, 0x5e, 0x90dc, 0x7f, 0x5, 0x2, 0x81, 0x80000000, 0x0, 0x6, 0xf82, 0x80, 0x5, 0x81, 0x0, 0x4, 0x8, 0xc1, 0x80, 0x1, 0xd, 0xf26a, 0x7, 0x1ff, 0x7fffffff, 0x1, 0x9, 0x4c, 0x1, 0xfffffff9, 0x4, 0x3, 0x6, 0x5, 0x7, 0xfffffffc, 0x6, 0x1, 0x2, 0xfffff001, 0x3f, 0x3, 0x20, 0xfffffff7, 0x7, 0x94, 0x4f4d73ad, 0xd42e, 0x8, 0x5, 0xffff, 0x5, 0x2, 0x7fff, 0x8, 0x7, 0x3, 0x3f0, 0x20, 0x3, 0x4, 0x8, 0x5, 0x1f, 0x3, 0x100, 0x3, 0x8001, 0xffffffff, 0x10000, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 0x20, 0xbb1a, 0xfffffffb, 0x9a78, 0x2, 0x9, 0x8000, 0x100, 0x6, 0x767c, 0x0, 0x0, 0x54, 0x0, 0x3f, 0x4, 0x9, 0x57, 0xff, 0x3, 0x800, 0x6, 0x8, 0x6, 0x0, 0x2, 0xd2f, 0xffffffff, 0x3, 0x10001, 0x2, 0x2, 0xfffffffa, 0xff, 0x1, 0xfffffff9, 0x0, 0x1000, 0x7fff, 0x3, 0x4, 0xe72, 0x2c, 0x9, 0x7, 0x2, 0x0, 0x7, 0x4, 0xfffffffc, 0x1, 0x100, 0x4, 0x9, 0x0, 0x80000000, 0x5, 0x200, 0x9, 0x3, 0x8, 0x6, 0x1, 0x7fffffff, 0xcd2, 0x9, 0xcfa2, 0x80000000, 0x0, 0x0, 0x7, 0x5, 0x0, 0x200, 0x6, 0x70000000, 0x40, 0x1, 0x8, 0x7, 0x7f, 0x2, 0x3ff, 0x7, 0x3, 0x9, 0x4, 0x1, 0x4, 0x4, 0x4d4, 0x287e, 0x1, 0x5a4, 0x3f, 0x83800000, 0x7fffffff, 0x751c820a, 0x8, 0x9, 0x1f, 0x15, 0x5, 0x5, 0x400, 0x1f, 0x3, 0x8, 0x5, 0x1f, 0x200, 0x0, 0x0, 0x5, 0x1, 0x7ff, 0x5, 0xfffff800, 0x20f7, 0x1, 0x100, 0x3, 0x8, 0xfffeffff, 0x3f, 0x0, 0x8b4, 0x6, 0xc2, 0x8, 0x3, 0x2, 0x7, 0x3ff, 0x8, 0x0, 0x2, 0xffffffff, 0x6, 0x7fff, 0x3, 0x7f, 0x0, 0x6, 0x2c04, 0x7f, 0x65e, 0x3, 0x8, 0x9, 0x3, 0x0, 0xa4, 0x9, 0x8, 0x7fffffff, 0x9, 0x73, 0x0, 0x10001, 0x4, 0x2, 0x1, 0x4, 0xffff, 0xc52, 0x9, 0x401, 0x81, 0x3, 0x3, 0x7f, 0x6, 0x80, 0xc93, 0x8, 0x806c, 0xd9aa, 0x8, 0xfffffffb, 0x59, 0xda5, 0x1, 0x401, 0x10001, 0xea39, 0x8, 0x4ea, 0x8ac7, 0x10000, 0x6, 0x8, 0x4, 0x6, 0x4, 0x400, 0xe1, 0x4, 0x4, 0x1ff, 0x7fff, 0xfffffff8, 0x6, 0xe9, 0xa738, 0x2, 0x4, 0x1, 0x7, 0x5, 0x10fb, 0x0, 0x6da, 0x4, 0xd7b, 0x8, 0x9, 0x8, 0x800, 0x9, 0x3, 0x3, 0x40, 0x3ff, 0x1f, 0x67e, 0x3, 0x9, 0xba, 0x0, 0xdd3, 0x4, 0x18c5, 0x500000, 0xe4, 0x20, 0x2, 0x2a, 0x6, 0x5, 0x1, 0xcc0, 0xa88, 0x7, 0x6, 0x6, 0xf9c, 0x6, 0x20, 0x4, 0xad25, 0x1ff, 0x7f, 0x400]}) syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x100010, r0, 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:54 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc07e}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:54 executing program 1: sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x4}}, 0x18, &(0x7f0000001080)={&(0x7f0000000080)="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", 0x1000}, 0x1, 0x0, 0x0, 0x24000040}, 0x4c804) r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0xffffffffffffff2c}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x810, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) socketpair(0x1, 0x800, 0x101, &(0x7f0000000000)) 04:37:54 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:54 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 04:37:54 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0x1000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r0, 0x10000000) 04:37:54 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:54 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x40000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:54 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:55 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x0, 0x3938700}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_flags}) 04:37:55 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 04:37:55 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f00000001c0)=""/4111, 0x100f}], 0x2}}], 0x2, 0x40002142, &(0x7f000000b6c0)={0x77359400}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', r0) accept$ax25(r0, &(0x7f0000001200)={{0x3, @null}, [@default, @bcast, @bcast, @remote, @remote, @remote, @remote, @null]}, &(0x7f0000001280)=0x48) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40801) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) connect$ax25(r0, &(0x7f00000012c0)={{0x3, @default, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @null]}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002dbd7000fedbdf250600000004000180f7ff010004b0fb4a2872eab8000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 04:37:55 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x440, 0x3f4, 0x400, 0x70bd28, 0x25dfdbfb, {0x5, 0x2, 0xd, [0x8, 0x1ff, 0x6662295d, 0x3c2e1215, 0x7, 0x750, 0x0, 0x2, 0x0, 0x7, 0x1, 0xb54c, 0x6, 0x6, 0xa3, 0x6, 0xffff3ba6, 0x6, 0x10001, 0x9, 0x0, 0x9, 0x8, 0x3aa2df5c, 0xd74d, 0xfffffffb, 0x101, 0x9, 0x9, 0x8, 0xfffffff9, 0x79b47854, 0x1, 0x6, 0xd08, 0xe7a, 0x2, 0x5, 0x1000, 0x5, 0x9e, 0x1, 0x5, 0x1, 0xd300, 0x101, 0x35934745, 0x28000, 0x3, 0x5, 0x1, 0x1, 0x5, 0x633, 0x401, 0x4, 0x42f, 0x3, 0xfff, 0x1, 0x5, 0x3, 0xfffffffa, 0x96], [0xfffffff9, 0x9, 0x0, 0x73, 0xfffffffb, 0x9, 0x4, 0x9, 0x80000001, 0x0, 0x0, 0x401, 0x400, 0x5, 0x1f, 0x6a, 0xffff, 0x5, 0x0, 0x62, 0xffffffff, 0x1d, 0xfffeffff, 0xffffffff, 0x41, 0x80, 0x2, 0x1, 0x4, 0x8, 0x800, 0x4, 0x80, 0x3, 0xb9, 0x0, 0x9, 0x7, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x9, 0x6, 0x0, 0x1000, 0xd8c9, 0x6a0, 0x4, 0x1, 0x5, 0x10000, 0x5, 0x0, 0x3, 0xffffc4f5, 0xfffffffa, 0xf5, 0x1000, 0x1, 0x8001, 0x5, 0xfffffff9], [0x80, 0x3, 0x2, 0x8, 0x15c, 0x7, 0x3, 0x9, 0xd0, 0x5, 0x1, 0x7ff, 0x7ff, 0x7fffffff, 0x4, 0x0, 0xfffff801, 0x7d09f332, 0x6, 0xb224, 0x9, 0x9, 0x5, 0xe942, 0x0, 0x7f, 0x5, 0x8d7, 0xf63, 0x401, 0x9, 0x1, 0x2, 0x380000, 0x7, 0x8d7, 0x1ff, 0x8f33111b, 0x10000, 0x0, 0xd06, 0x80000, 0x1f80, 0x80, 0x4, 0x1, 0x401, 0xff, 0x4, 0x8, 0xc0000000, 0x2, 0x101, 0xfffffff8, 0x4, 0x0, 0x3ff, 0x487, 0x8, 0x0, 0x4, 0x7, 0x8, 0x2], [0x9, 0x1f, 0x9, 0x800, 0x2110, 0xfffffff7, 0xb566eb6, 0x0, 0x5, 0x20, 0x800, 0x4, 0x2, 0x1ff, 0x5, 0xfff, 0x1, 0x3, 0x986, 0x0, 0x5, 0x10000000, 0x7f, 0x5, 0x40, 0x59800000, 0x8, 0xa2b, 0x7, 0x3, 0x3f, 0x1, 0x2, 0x1, 0x4, 0x3, 0x6, 0x1, 0x9, 0x9, 0x6, 0xfff, 0x3, 0x6, 0x9, 0x3, 0x6, 0x3, 0x7fffffff, 0x7, 0x5, 0x7fff, 0x4, 0x3, 0x4c, 0xef63, 0x65, 0x9, 0x81, 0x5, 0x401, 0x1, 0x488], 0x1f, [')#(*-,&\x00', '%)\x00', ':\x85.\x00', '+\x00', '%@\'[\x00', '@@#&\x00', '}-\x00', '\x00']}, ["", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x880}, 0x4) 04:37:55 executing program 0: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) 04:37:55 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x0, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:55 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x36c3, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x1, 0x2c2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240), 0x0) r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xa68, &(0x7f0000000100)={0x0, 0x6c47, 0x10, 0x2, 0x3b8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000280)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000) [ 1755.845845][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1755.869680][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:37:55 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x0, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:55 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x100000}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:55 executing program 0: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) 04:37:56 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x0, 0x3938700}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8925, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_flags}) 04:37:56 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0xfffff801, 0x6, 0x1, {0x0, 0x0, r0}}, 0x8001) 04:37:56 executing program 0: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) 04:37:56 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x0, 0x0, 0x31b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:56 executing program 1: r0 = socket(0x10, 0x80000, 0xffff000) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x3, 0x6, 0x8001, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @broadcast}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:56 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 04:37:56 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:37:56 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 04:37:56 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:56 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) r2 = semget$private(0x0, 0x2, 0x0) semctl$SEM_STAT(r2, 0x0, 0x12, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:56 executing program 5: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{0x0}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xca9a3b}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:56 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x0, &(0x7f00000002c0)) 04:37:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/240, 0xf0}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f00000003c0)=""/85, 0x55}], 0x6}, 0x40000}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x0, 0x3938700}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8925, &(0x7f0000000300)={'ip6_vti0\x00', @ifru_flags}) 04:37:57 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 04:37:57 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_complete(0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000180), 0x0, 0x4) io_uring_setup(0x9fa, &(0x7f0000000100)={0x0, 0x7dbd, 0x10, 0x1, 0x266, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r1, &(0x7f00000002c0)="0a5e66556284cf3bae68361e24fb73b7585f2f296bfc69a06f748b8e369d97cb061831e818e661a472f008b205f7b9576d33442195e67e40ca43a45304eca3f721778145432511d80f0665ce418c98481aa8a1f9c20b8c3f8d81ca6ef69af53ddc10b735b38a8a386437b79d24ff13c0c355a8263d3c06df56ce17bb06cc72c8940020fb2677f41e7a8bd1076c", 0x8d, 0xfffffffffffffff8, &(0x7f0000000380)={r3, r4+60000000}) 04:37:57 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x0, &(0x7f00000002c0)) 04:37:57 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x0, &(0x7f00000002c0)) 04:37:57 executing program 4: r0 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x598a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x2cde, &(0x7f0000000000)={0x0, 0x1010, 0x2, 0x3, 0x1a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x100010, r1, 0x10000000) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), 0x0) 04:37:57 executing program 0: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) 04:37:57 executing program 0: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) 04:37:57 executing program 3: syz_io_uring_setup(0x71e6, &(0x7f0000000140)={0x0, 0xdafb, 0x1e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000280), 0x0) 04:37:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x64, 0x2, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xc7, [@multicast2]}]}}}}}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0='bpq0\x00', 0x10) recvmmsg(r0, &(0x7f000000b4c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}}], 0x2, 0x40002102, &(0x7f000000b6c0)={0x77359400}) socketpair(0x2a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f000000b780)='l2tp\x00', r0) 04:37:57 executing program 4: syz_io_uring_setup(0x598a, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) write$apparmor_current(r0, 0x0, 0x0) syz_io_uring_setup(0x2e04, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x5, 0x6, 0x0, 0x400, 0x0, 0x1}, 0x5) syz_io_uring_setup(0x2cde, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:37:57 executing program 0: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0)