0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(0xffffffffffffffff, r1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)) getsockname(r2, 0x0, &(0x7f0000000580)) linkat(r2, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1400) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) sched_rr_get_interval(r4, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0xc, 0x0, @tid=r4}, &(0x7f0000000180)=0x0) timer_settime(r5, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) 14:01:51 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:51 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:51 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:51 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:51 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:51 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:51 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:51 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:52 executing program 5: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x131000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}}, 0x800) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71dab5d7d024e536f4d1b7fdffffffbcb90d5838ea843641874554d245218a8eafaf063608e600", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:52 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x400c744d) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r2, 0x0) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r3]) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r4, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r7]) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r8, 0x0) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r9, 0x0) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r10]) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r12, 0x0) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r13]) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r14]) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r15]) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r16]) getgroups(0x5, &(0x7f0000000400)=[0x0, r13, r14, r15, r16]) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)={0x480, 0x0, 0x2, [{{0x5, 0x1, 0x4, 0x1000, 0x6be, 0x40, {0x0, 0x5, 0x9, 0x2, 0xcf, 0x0, 0x0, 0x8, 0x9, 0xffff, 0xffff3907, r2, r3, 0x1, 0xf79}}, {0x6, 0x8001, 0x0, 0x6}}, {{0x0, 0x3, 0x80000000, 0x5, 0x3, 0x4, {0x6, 0xffffffff00000000, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x4, 0x4, 0x5, 0x3, r4, r5, 0xb12c, 0x81}}, {0x1, 0xfca, 0x16, 0x10000, 'cpuseteth1selinux,eth0'}}, {{0x0, 0x3, 0x1, 0xfc37, 0x2, 0xffffffff, {0x0, 0xffffffffffffffd2, 0x2a2b4fca, 0x3, 0xfffffffffffffffb, 0x20, 0x3, 0x4, 0x4, 0x6, 0x8, r6, r7, 0x7, 0x80}}, {0x2, 0x1, 0x0, 0x7fffffff}}, {{0x2, 0x1, 0x1000, 0x9, 0x4, 0x1, {0x4, 0x81, 0x6, 0x9, 0x6, 0x5, 0x10001, 0xfffffffa, 0x80, 0x2, 0x7, r8, 0xee01, 0xc128, 0x8}}, {0x3, 0x10000, 0x10, 0x9, 'vboxnet1-vmnet0,'}}, {{0x6, 0x0, 0x2, 0x7fffffff, 0x200, 0x24, {0x3, 0x9, 0x4, 0x9, 0x40, 0x100000001, 0xfe3, 0x6, 0xffff, 0x9af5, 0x3ff, r9, r10, 0x735, 0xca}}, {0x5, 0x2, 0x8, 0x1, ')cpuset\xcc'}}, {{0x0, 0x2, 0x9, 0x20, 0x7fff, 0x0, {0x0, 0x0, 0x4, 0x200, 0x1, 0x4000000, 0x5, 0x8, 0x2a7, 0x8000, 0x9, 0xee01, r11, 0x9, 0x2}}, {0x5, 0x8000000080000, 0x3, 0x8, 'cpu'}}, {{0x0, 0x3, 0x7f, 0x4, 0x0, 0x3cd, {0x2, 0x3, 0x0, 0xfffffffffffffffb, 0x6, 0x1, 0x0, 0xf9, 0x24000, 0x20, 0x7, r12, r17, 0x0, 0xfffffffa}}, {0x5, 0xa6e6, 0x9, 0xbe7, 'eth1(self'}}]}, 0x480) r18 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20380, 0x0) write$cgroup_subtree(r18, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x77, 'memory'}, {0x90a8fd1b41bc27d1, 'io'}, {0x2d, 'cpu'}, {0x2d, 'io'}]}, 0x1d) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:52 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:52 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r3]) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)={0xffff, 0x0, 0x0, 0x4}) getsockname(r7, 0x0, &(0x7f0000000580)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, 0x0) fcntl$dupfd(r9, 0x0, r9) r10 = dup2(0xffffffffffffffff, r9) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000100)) getsockname(r10, 0x0, &(0x7f0000000580)) linkat(r10, &(0x7f0000000400)='./file0\x00', r8, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000440)={0x0, 0xfffffff7, 0x5, 0x5, 0x0, 0x81, 0x9, 0x3f, 0x4, 0x6, 0x0, 0x200}) linkat(r7, &(0x7f0000000400)='./file0\x00', r5, &(0x7f00000006c0)='./file0\x00', 0x1400) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESOCT=r5]) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r11]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x5}, [{0x2, 0x4, 0xee01}], {0x4, 0x3}, [{0x8, 0x2, r0}, {0x8, 0x4, 0xee01}, {0x8, 0x1, r1}, {0x8, 0xe71b3278cbf398ac}, {0x8, 0x0, r2}, {0x8, 0x4, r3}, {0x8, 0x0, r4}, {0x8, 0x1, r11}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x2) r12 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r12, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:52 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:52 executing program 3: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(0xffffffffffffffff, r1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)) getsockname(r2, 0x0, &(0x7f0000000580)) linkat(r2, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3ef741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:52 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:52 executing program 2: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000880)=ANY=[@ANYBLOB="02000700ffffffffffffeb49968045e0ffffffffffffaaaaaaaaaa04aaaa7baaaabb0431d99ca8beaaaaaaaaaabb874f74c7ccbddec0db0a57bc30a48da13fa9c199591336896f1822a3581215"]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) io_setup(0x7ff7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/context\x00', 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r5, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r7, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/access\x00', 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.stat\x00', 0x0, 0x0) r10 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r10, 0x4, 0x6100) ioctl$EVIOCSREP(r10, 0x40084503, &(0x7f00000003c0)=[0x7]) r11 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r10, 0x20000010000, 0x2) sendfile(r10, r11, 0x0, 0xfffffffffffffffc) sendfile(r10, r11, &(0x7f00000000c0), 0x8000fffffffe) io_submit(r2, 0x5, &(0x7f0000000800)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x42, 0xffffffffffffffff, &(0x7f00000001c0)="874896b7aff58ba9ef952a9e75ae925a857bd6b8c4342950a373cc9ac404bfa0eab3d1d93df56d3cba010228", 0x2c, 0x100, 0x0, 0x1, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x9, r4, &(0x7f00000004c0)="c3fe3e7a3a8afa40de4b230c21d6970b5ea6f56bf77f5a3b6d599ea6f3a7ea444830febcbbb8de381bbde043bd0f9372c094e3070ed79f4965b4b68763b4a82b589859e82b1e4572dfa5df6f4aa00be2c3796f30651e33930ac5b733457c44b136accd128e7f7aceaff28daca223ed2f6e9fcef08a42fc4f1d6267ebbbc0fdf5e8c5c73e192d011906b44be6b8289779bfea9b5f64367d1cd2de43ea21d1931700bb5538e59c053dbeaf217c0a43cc62b7a265e38c59c2721ef0", 0xba, 0x4, 0x0, 0x2, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x4, r5, &(0x7f0000000c40)="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", 0x1000, 0x82, 0x0, 0x1, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x800, r8, &(0x7f00000005c0)="449d5457d3f4a049a34cbcf98b60295291eaeb803e8c57f071e65a96ed52802690b76345cacaff4aca955aeb0fb63e2d686dd0e25fecdaf3d235d9015fd94dcfda55611ea237172b4cefd5dc7e4c6723691e3cc30399f0a7ed5d43720efd5017656af6d61a7f7ac324ae3df02f688446de0044d42d72ec2afc46b3c87280646578944a977e1048b16f0a45bd16dc726c50209b2c6fe1d0f628a8f8d5e8c1b27b3a96f75725df4b745a003fe440", 0xad, 0x0, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xa2b029ce45ec62f2, 0x9, r9, &(0x7f0000000740)="914a1e47d9a5a475999f89ef23c23be76d8e42b7301e4bcca753d89fcaa0025869fc2c897a9a3ef0e5f81cc65cd233009b4a063bfe6b64f9a7d1326ebeef05417b271ca5c7603afaab906f8775a49bb70156bac434c49bc6f7e68c98eeb11cf7070cca9611c8eeb069d0", 0x6a, 0x8, 0x0, 0x2, r11}]) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, 0x0) fcntl$dupfd(r12, 0x0, r12) r13 = dup2(0xffffffffffffffff, r12) ioctl$TCSETSW(r13, 0x5403, &(0x7f0000000100)) getsockname(r13, 0x0, &(0x7f0000000580)) linkat(r13, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1400) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r15, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r15, 0x6) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC=r15, @ANYRESOCT]]) ioctl$TUNSETGROUP(r13, 0x400454ce, r14) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r16 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vga_arbiter\x00', 0x103c0, 0x0) ioctl$LOOP_SET_STATUS(r16, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x17, 0xa, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x1f, 0x2}, 0xf) 14:01:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:52 executing program 0: timer_create(0x5, 0x0, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}}, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(0xffffffffffffffff, r3) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)) getsockname(r4, 0x0, &(0x7f0000000580)) linkat(r4, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) timerfd_settime(r2, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180)=0x1, 0x4) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000240)=""/190, 0xbe) 14:01:53 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:53 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:53 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:53 executing program 3: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r0, 0x6) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd730aba73a2061ec3f3f3f37c1e3f00000021729c07790c5ab6f14c8cd400"}) 14:01:53 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:53 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='\xf8\x9b\xd1\x93\xbb\x0e\xbc\xf2x\x00', 0x0, 0x0) 14:01:53 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:53 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:53 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_to_hsr\x00'}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x800) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r4, 0x6) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/access\x00', 0x2, 0x0) r6 = dup2(r5, r4) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(0xffffffffffffffff, r8) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000100)) getsockname(r9, 0x0, &(0x7f0000000580)) linkat(r9, &(0x7f0000000400)='./file0\x00', r7, &(0x7f00000006c0)='./file0\x00', 0x1400) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) linkat(r6, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$RTC_PLL_GET(r1, 0x801c7011, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:53 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:53 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:53 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:54 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x5) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0x1a, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0f0830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:54 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:54 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:54 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x10001) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') fcntl$lock(r0, 0x25, &(0x7f00000001c0)={0x2, 0x3, 0x1, 0x8, r1}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:54 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:54 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:54 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r0, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f0000000040)) r3 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r3, 0x2a, 0x54}, &(0x7f0000000300)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613338342d6176780000eaffffff00000000000000000000000000000098f025ea193200000000000000000000230000000000000000000000000000000000000000007f078b40b3bee23668a1f6f954dc9842abc4bd8c6e1e13ed0d066fb23e1ec39db44d86f58c047f14854cae48"], &(0x7f0000000240)="95dc78a7a3e87454952b7133d2e91bcd2f90cbf2dbbda5b7029356c8f592dee0a3bb7770a5927d84f4e5", &(0x7f0000000280)=""/84) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x1, "d3484e71da2b27affe84bea27bb7c8fafeea843641874554d245218a8eafafb55c01b85dc721e14bb5d320e6063608e600", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0xfffffffd]}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0xe, 0x10, "ef2c9d1279d992d91e9c5c811c0b3f345785ae395b0766547f6ea2a95680a8faa3e52d70e527ec433729656fbccfc219344db430f8b1f35cf2710e01329222b5", "b5379da77336a9c4c1f22d9528558a3c4c6c00fcb49da9f44d90144dc4976db0", [0x1ff, 0x6]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(0xffffffffffffffff, r3) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)) getsockname(r4, 0x0, &(0x7f0000000580)) linkat(r4, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$LOOP_CLR_FD(r4, 0x4c01) 14:01:54 executing program 2: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x7ff) write$P9_RLOCK(r0, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x241) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r3, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r4 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r4) keyctl$reject(0x13, r4, 0x20, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f00000001c0)='fdinfo/3\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r6, 0x6) fcntl$setflags(r7, 0x2, 0x1) write$binfmt_elf64(r6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x2f6) 14:01:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:54 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:54 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:54 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_to_hsr\x00'}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:55 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x0, 0x3, 0x0, 0xa3}) 14:01:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:55 executing program 3: openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8ea2, 0xae9a5aa7a425094d) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc, 0x11, "d3484e0800000000000000a27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd8302ba7372061ec3f3f3f300", [0x3]}) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) setxattr$security_ima(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='security.ima\x00', &(0x7f0000000400)=@v2={0x5, 0x1, 0x10, 0x2, 0x9b, "8bd351bb4aa3c9913bcdb54530c9cffccc11732af129d9764e51ccd5549d74aaa32cf228ed41afcb1463770be3e7f31f1c3d243d0b74ea3ac6624f9cd94cf56a77f4c9e41612104c74aeb60936a120dd5c5cf3fa7c701e1ca75f67d55d6051f0d7020f95151e8cf68e90c5525846430fd22c5013736754e496bc1bd54929f74d3eec84e116556f9266c214a4ea94dd3e1814c979090ecf34cdf02f"}, 0xa5, 0x2) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000300)) syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x2) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x3, 0x101, 0x80000000, r4}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xf709d4c0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 14:01:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x78, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0xb80, 0x0) sendmsg$TIPC_NL_NET_GET(r1, 0xfffffffffffffffe, 0x800) 14:01:55 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r0, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f0000000040)) r3 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r3, 0x2a, 0x54}, &(0x7f0000000300)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613338342d6176780000eaffffff00000000000000000000000000000098f025ea193200000000000000000000230000000000000000000000000000000000000000007f078b40b3bee23668a1f6f954dc9842abc4bd8c6e1e13ed0d066fb23e1ec39db44d86f58c047f14854cae48"], &(0x7f0000000240)="95dc78a7a3e87454952b7133d2e91bcd2f90cbf2dbbda5b7029356c8f592dee0a3bb7770a5927d84f4e5", &(0x7f0000000280)=""/84) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) [ 434.529754] blk_update_request: 3228 callbacks suppressed [ 434.529762] blk_update_request: I/O error, dev loop6, sector 0 [ 434.541426] buffer_io_error: 3228 callbacks suppressed [ 434.541434] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 434.554385] blk_update_request: I/O error, dev loop6, sector 4 [ 434.560400] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 434.568108] blk_update_request: I/O error, dev loop6, sector 8 [ 434.574088] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 434.581771] blk_update_request: I/O error, dev loop6, sector 12 [ 434.587856] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 434.595518] blk_update_request: I/O error, dev loop6, sector 16 [ 434.601619] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 434.609295] blk_update_request: I/O error, dev loop6, sector 20 [ 434.615482] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 434.623169] blk_update_request: I/O error, dev loop6, sector 24 14:01:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) [ 434.629261] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 434.636935] blk_update_request: I/O error, dev loop6, sector 28 [ 434.643003] Buffer I/O error on dev loop6, logical block 7, lost async page write [ 434.650785] blk_update_request: I/O error, dev loop6, sector 32 [ 434.656914] Buffer I/O error on dev loop6, logical block 8, lost async page write [ 434.664561] blk_update_request: I/O error, dev loop6, sector 36 [ 434.670792] Buffer I/O error on dev loop6, logical block 9, lost async page write 14:01:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000003c0)=[0x7]) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f00000000c0), 0x8000fffffffe) write$selinux_access(r5, &(0x7f0000001340)=ANY=[@ANYBLOB="737973746501ddfa4f686370635f73746174655f743a733020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f0101742773302d73303a63302e633130323320303030303030303030303030303046636c1e5b1af1917456c0fc033d500d36"], 0x66) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="72797a314ac0d2013edd1bc935e289bff3725baea79b763484b72b13ff9078f6a75ad18ef0a2dab2059e87b48fd0362fc691f1c931ea583ee77a091e780bdc"], 0x3f) r6 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="d17d28190941328101cc91ca52287030b5153acd243371646dabc62d8b388a9ee0dfac5c3fe1a0ee2efc6b4df0b8f7d92b3891832d270425de4ae2497d400f9c623f67051676ac5dd8615b5fcf2185d756495faafa0b4fde182aa8c90e5d26f4e0a057a565acb56f55274665409e9deed727e583cf2cd565fe4e3366d9438467a2cf7e6fed3890fc004e4fdef4538b0af0c872a1b2393dcae9e541a15538eb4859c607328650fefa99148143fd8c486e6f1c3efcdc2f3a66621b06794da14fa85ceb708d8084aaceee3beeda9359e3f61b8e1993b6589ae1", 0xd8}, {&(0x7f0000000340)="b2eca674426521566a5f7a59af2a0ec94aa1e1e4dbe8094768730c13c6da9f209a7477d81623a6f6944820a9f5779d7d600e17dcb2554564cfcedc90371c205d59089563d14deca0e7787fa15644b38b6695e375f9d433943249e12ea567c92eeb6af26f4c43efc8671f61d213921b78f187be60b1315f81f47315d51c9bb3e24b9406d8fe57a78c4c9beb19207514dadc7686866de3e1598548569b081dd0afd98a24ffa0f055a602e82e3739b4c092da1decc5391130c43614cfec21eb2713cef6c9a91f2803398ff477ea894b803330f033128de491c09a801c22e83dfc70da2b6ec0ba3930b3d89e9d534cecb05cb28322a529674118f2a8e364777d0a288320b527e580f455f63540acf3390b2e7d9240b3daedb0e8d79a490ed4044be0119f7f2311d8f00a599df81f510299c7b6c517ced078b4dd2e8589f2fe0d9629e2c98493ddd4ea9246d3b4270c986b080cb48acce5bbb71ab60298d47011b05b05226305e03438bd02e62076ed9f376ea6f4beb3008b144b37bab892149238e716867d96312f59798a35a697d6e82c7d347304368d149174b1800c5087cb3b4165150024674c8f3e9966e845c904881e9f9282fd2ad882d9d32aed541684970a101b2c8828797835daacc02dc5824687e2f07ca0ff6888ad349b445602b3f44a428d1728f32d3b362647358b78108462b178c85c97e21fb482047302519a1f1636f5078948f9e5b0062b38df64c6cce81cd7abc018adf2960730730b96d97aad83b67e890ca0f4e36e289944a8e8858fde9ee7ed932d17ece789d75e826c0812155814c02abbe8425db33058e13afc70bd3bac7aaf6cee7d489e6e9669e4031ef5b228cc3107112279315b47fe7edbfafde6073feeea7ca0310efae7508cc0d2e31dcdd4d6a682a9945863ae0ab11099f62d632fec7694294867c5ddb3f7468686cad6d6847ab479ec302262943b57a1d6488bfaf89be1c2877a958ead933374889201cf4119a1e9f935fc00e731fc8991cf7bdeb988fb6da8f082ddc87964911be8c97bf8a6f5d54920b564cb178dd1c0c914840bd487c07f7de23ea949bf5eedd577684ded88229cb13cadb7122df93322bb419b79bd1bc4d51759cb8cd99bdfe580cbe91be7828b7e1afc57160caa9eb6c80b6d9d618f638b4b8182a5595fba4d5fa226c4e1ef8b84dc244a33c9ba9537fe3d276bd4dbea4117a7d5eb627f90726391fba4c1e5b3894a61cf741280b1366603bae2efe9bdc33f2f4b4a5fed9a7d0a1817def4d53d292e4be9ea547797fbec9d4d8a83b12e1d4b62bba0daf2627ac14004d709dafdfc8ed2751e00523a1196bc913c946b7b8504927445975cc43a4e6c2f3059e3a9a8f1822ee502da684745025b5565d9a3b2c710921f19130f0f65ac0d130186a34e8758c5f5f79905201f568f891ba65555703d300758f3e6c1ed7bd19b12202767c2ab4332675ff070d3a241cfc75b4c890652314e1c3e1460abe3ba13ae98c88502dddb1114bc8b5b867f3471c91b1ecfd51db04b614f38b5dfbb39a9d487d69917c49207080ad882a9f784467864f4fe872ebe6a49ffb09dc146370d1cda0623207c6ea2d37f563c337b3fee3ac8152694e03a4a2295372fc072a4aec55e125607e817d1d93e8c816a9d462ecbdc5e1588b1b8f2fc69cfacbb175936cce1645e762c9cb710982d0ef570adf35552786b93f8b6783cf50463dec8c3a35e0e9cd6cd0211503f9443cc793c56abd18af2a390420feeb7e5f8361c1ba8ddfff9310760d2c1a2b80f41723f5223a23c49ed692c3b500c7b7d63dcf6a3d1430207d677b8057987a92f3b71bce617b25d999bbcf6703e76a6f0f1f24014bce3b8c0914889ed832ed7ad0d903e646bb68157894a62cb5640a32fa455d67e262946123bd434a0343e1c22184c3aea90c06a5305b8d7c00d5265f5e04febf6e50d68151630ab3f40ec647d216bde5cc0f528e1af1d7ceb09483db264d7071c962670c5473023ebf747f5c04c003a2d10053d28ea5dd8898d7131948bec249161271e56603a39d3e481ad91a1cdeae2822e12b7227c064c17ff36a10a90a0f0146ed808dbc3cd626dc8f9ed2c6b6798aab38c1cd1db06194c713ed9114de5911b4b800eb420ef792c63654fe0e4d46aa62c8f2d177c691b729c941b8902b3442a2d7c39467c3ba259505eb68ff99888df65ae7d8ddb092c4a10e46d6989ddeb17709607428c3f245540510e3736f49b6a21bc5b7258591c0c9c42e7bd733d4c786c3c24a610a328c04dd9a850c3ac650841d09b67ac1264a88d3103e306c80b86a2e191bbc8641af275b15566b3f22dc6ac69b49e1c82dc8e5c2a79decc4e996f6e8ef166b2fb58fd1d04c90deb563b8d5f428f941c4ed33759962d752bbc73d7e58d13c102226a90957b091635e3a8d7da8b1255e869f83d2e805d2f621421ef9f0818da43f875eeea7e8ddd3e0cdfde4f37ee2f70a408ad8f5e311cecde0b466f129e72d8c31dea26afca5b7cea2bc0e727df243cd1a76c28cc34fc9cfb2ea0730df38c8da806d38334c22a7e7360377f7ff5a5d974f11b9645631a6dc25c2b3e734b545add1b7d8aa52739e3c63496e9fa89aad2ce4e120d26494553529c79691aed63d22b1bbec5ac835afcc560eeb5b6298dd24cf3343bcb3c8446677da90a49a7131fb18bec51bc6d749fecdfbee33c7c4eb138a3919865a347a6c8ae117e6dfafd2809060b660a37091c31ba50f0c5173bc97d5198a04da91ee46a7d65d4717e63c9bd8312547baf7ab0164c34413992cb98c22fbcf58b5c59022cc9b63fefa1420027a9e4a2aba2c90ebed4171880b736562f01bd2b9de364e55aa2064f147e1f525c9b50a24faa315719ef118497fdfc4a62518e1bba3bb67f0d4c53de3e871a5e10b62819ba6d02e67f7e5cb22a307093d9bf060a253f53ca6f88cf10875bb9733ce1ba158372ce81066c0fb85a45275a732a8cbb64b6741f74e17f17f8aea99a4cfbb2775d072e19bdf8c808973169ccee9db853e035860e40ef8e6beffda6c875a54393f15a361dce47e25888d6821d4cfc9cd0bf25f7528a045055ea7e098ed58ee4e2a79cda3b4233d0cddadf53574416a34d4dc7aa4669aa278c156c27def13d9e72499d6dcb4a72be356fd92a762d651044575fb543bb9cef15d3f55b2fb3b5a56e4bf10f4b30f2761ff48ebec5ddb6060f1b896f18a82e43a50ae76a31af2d1fc2f5abcfbb20e80249dfa99b6e2694f5e6cfc4d6eecbf1d49e9759ff1eb5f2e60a24d1719a28e526def1937083564ee4a977ead016076f1d64cb04746808c8aa8597037e5faa4ed707ffb7cb5d7be9711846a05ead8c4ddb2257cd1dea785d503c86bf335f4a35c8a6f61ceb7b41b8237fab59a32a485e6bd6fc24bf12d3c121ed160ab4fa6f776e0d6195d61aba903c89f70bc8f879fa8656a3dc316038ca8641f7f909be8621ed4ade9551d8dde79b0a2cecf02cd8bb9debbb3db27e7203dc4fd1a8c370a7585fddb6a23e74d1267869aecee3d448f37d08dc83f8dc011ab6ccb2ccfea2227a802b9122a693d3444e0a119297d8fa4171e319f1b6c8cbe81c104624a6a0d2f81f09bc45b0e78247cd6c6b148f393885bc74c7437258f138e870964a75ed3aff320e3163f1c24e72e871667dd49d64de2515803493982c3bf0904b40f88eeb1e879e1c015ba36ac6f44868fce8d802b19dec851e0928f9cb8bc0c378f8789c9dd1731f5318803c07790a783d3f41ab9e13062e107afb326ad1deedae3f22a9a41196066cb799d2d9cb462c6ad523823e88f6681a0813fc74a6c0fbc58dce6589b2e19bca37a48ac486ebf86c187d9f0638e5f988309dd38f5ff8125b06ad25a0c3351d240aa11c2a57bd8457b6045f35c44fdb5c6ab41915ba6ac4e5ebb21c2b4c05df5fa045d89dea76f2aa1e89a673cf6baa9bb07c21b727f5a7ebceda0ccb0f4cc36d48fbdf6e3669d8f16b104bf9843475e424a22521b91709d9dfdaabf7bb2c4df2b9a0be017d3fcf4b8d3089291505038c92a577f3e0336376c90490dafe19a33ef9704e334a0b19ba58a0bc2ec3928586320bd08988e9f337b708c005fa7d96218d2fbceeb25b859966c469703c68cc1e72cd7222119edce9d86826d17d059a9e93d149161349c8bdc54791c608dc9b7ad5bf617d5e6349aaca80715a4587ae347784fc6d8dec605972191b41ab09aeb9b5af02da010caa2bcc63b368ac2e01e4047156f70e0a52b5854e0b9076c059dc37de623d176ec83952257cce4325e4b2772545559eb1768cde65ada282f0e210bfd80f5fdfe26ffb68a5ab93bdae01fc738e64bdc154e29718a695a9b6ca8a76ecbbffbbbd07119c611368abd73bd6b458f6c99d8b68e5edad27ce29ff98af46cebbba74ce2f0bceedb0ab0a55a728a92066eac6fef1c6fb4fc34602bd180b5a07c4596a43912fc05b2b99dc3880d7366eb5529ef6f4fd8371f08e7d79c1c009797e68a45e49a5fa86a1c49c7e6ecbbee0c13f5b94781cb0873c464ce7fd392d37c00d39a65e89c04bb066196525def71e3f8555c5c75f3183cc310f47cba6b75d7050882e516559d20fb7ecb5ca5dc639f1b67ce5794aea6c7701c76fda3f7cdf36dc28d5fbb992d82ef21d277d2c107609b72e8344d89d5cd46404c5ac3fedc5749aeb169a77035b43ee5f841dbb19b5499d954ad74f877907abe379b737319a461dc3b6d3afe9443d4659ded3ef951708e65778425fc8a0c0492cfab2974168720b83084f4ed1a0ca521a2fdef74f8ca659a5ebc0d92a5894237a760042d926421d12bba5dd94d55b8e554f81855456e6328fd41c829bd0a6241e10ad64fbd893d60cb5ffcddc5d1de749a9c7b479aa3780e6e42e94332b10cad9a182fb5e6458b5208ff7eee5b5181644668a3c329e85f35844c018e26108df2aabebac1002efc90e3eb9ff173944d22c8cdded33e7195f03e4b3ebcb1d3b7ff45581e8cf94ac14c81ac263225293497ecc0979d34e294def719eb97ed96af5fbf9c2f801d0d7871691cdefa21dce2faa8c73e0b671c2e227d877f3ea1d7784996932d770c9b7249ea2f5031bea2c7057127b9b3ba3f03e2cce0889343850cebd1937b026737a45fec5407bb1ed1c8f8c51df640e66adc7a9347fdc2c364d6cd40b11eeb6279c0638875abb41cf0327e12977fcb5678affde669e3cf53a6a04451fd9f7710f56a1f096e6b8e3ae3951fc59e761bcf1a23161759aed7b042b46e7e1580d823464ac4e15f0fc82e3d61b2080ca2b1cc44e1eb31256f23ea8fb1ad45d71e543f6f7f037e97481740dfbe517aa83211ac6558ebf023c3d7007c7c24cee4ce766b14fbebe4c8aad726ce1d7fe632040c991d308a9413672ea5e99df307c0536b0935b62f34efb5f042e3f835a20d7b91741552d4cddf0fe736f4fdd7676322b3d27c14b10793dd0c6f9d5643964c6f9116280330a18ecdf7092ecf3df3251f77b727f181328879a61632a6ef53a464826302aa8c9439dded8865121553891cc29830199dd43ac82387024adf1f2c62ba300c5325010d6e134497be7a19860a996fc854db5b21588813381c3e3180e6f0f79f5ad1a32f6ae59a4f7654caef029ca2efd2539b1c36b8d45574675c5d8a89a298d09970eef1a541606519121c2a3525ee160da58efeac79937516955e2c63b2a2987c4546c0f511a3219f5c50e7ffaad9c6143bfd0199b8def116b13a2c6919e3235a2ece0bdd88337bb79805e7fa52146f498a0301b270275de46bab937d53687b3a7b467ddc0", 0x1000}, {&(0x7f0000000000)="2f45cde8bb060b646b06dd0838b8417b6a546366125787c42fc36409ee0279c9b9bb4d968dbd77494ecc7b0f3203db6abfe8ac2445a4bf6e89b2e10574cb582667b7334818feb7413996333ffca6b5fbadc919483dec652971553796a0aff5be1623ca36f55b2563d445", 0x6a}], 0x3) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r7, &(0x7f00000009c0)={0x8, 0x35, 0x1, 0x5}, 0xfffffffffffffe7b) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f00000001c0)) 14:01:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/prev\x00') ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xfffffd3a, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x4}, 0x0, 0x0, &(0x7f00000002c0)={0xfffffffd, 0x4000f, 0xfffffffb, 0x4858b7f1}, &(0x7f00000009c0)=0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffe67) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000300)={0x20, {{0xa, 0x4e24, 0x9, @local, 0x1}}, {{0xa, 0x4e20, 0x6, @remote, 0x1}}}, 0x104) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='&\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)='user/proc![\x83eth0mime_type\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='<^wlan1\x00', r3}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r4}, 0xc) 14:01:56 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:56 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x204000, 0x13a) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x58140, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe, 0x6, 0x4}) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x495c00, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="47875e0fcbff4bbe45a6f145f2e19cb12ed7b645ba343e9e17e16a7919237538d00c205c", @ANYRES16=r1, @ANYBLOB="00022dbd7000ffdbdf25050000000c000400ff0300000000000024000700c3fe0100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100000000000c0008000a000000000000000c0005006147b32e6f2f6059080001000000000008000100000000000c0005000a010000000000000c0004000180000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x10, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x7e, 0x5b, &(0x7f0000000000)="6fe75f2cbd716c428ace593395688cfbbaafb774251cf89e6cbe42c5f2fd9027ef451ea3b7ea044b042ca8ee46d7c1c9e5d731537f079cdc4fbecfc75353b5bfc23d10858e2041144625e260f2846c07c7cb2048dc2ab33c0b7a3db11cd7d340fd4fe5bc9a53311712eded7571ffe126490a89e07cbf7abb3993373cbdd4", &(0x7f0000000180)=""/91, 0x3, 0x0, 0x6b, 0xc8, &(0x7f0000000240)="ba91642f331c5cbe2cc5975539a0707d7921785183a9959305f7d16da5ce153ca50fe939ad24765b737b880f0b7bfdb078e648acdd3c1d0a4a77e304090860394021b7fe0f106f946e497fb359ff4a159dd5f4e184fd3643d58b230217ef25b9a7a0d060d934a8ae4257fc", &(0x7f00000002c0)="5ce913a160daccd94a3b6628ee6eebf1e459b3b88f3f1546b54ce1f3abb116420109aeff21246c06b1dfc71f6f9f5405c9b894e5f37a30c6b76953e43eb9c82f24da607593246da5bb1b2978dc9ed79923eb2bb648a3486514088390d8eda675e5ede905babb069dd82d01d49fa6af0c950de69d9a881e936bd9fe67bd9911a9ed8fb351f4f0fb6f304bd6025251a17be5e8f120d410bf5da6f61d358443cdb8fc9c0d28020b7f283242e102b173e4fc6915c7cd5d88d0d2dff0d379674c5e64b6122f76eaa64fb6"}, 0x40) 14:01:56 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r0, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f0000000040)) r3 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r3, 0x2a, 0x54}, &(0x7f0000000300)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613338342d6176780000eaffffff00000000000000000000000000000098f025ea193200000000000000000000230000000000000000000000000000000000000000007f078b40b3bee23668a1f6f954dc9842abc4bd8c6e1e13ed0d066fb23e1ec39db44d86f58c047f14854cae48"], &(0x7f0000000240)="95dc78a7a3e87454952b7133d2e91bcd2f90cbf2dbbda5b7029356c8f592dee0a3bb7770a5927d84f4e5", &(0x7f0000000280)=""/84) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x469af084c881cf3c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x700, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x98c0}, 0x80) 14:01:56 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:56 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4101, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:57 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:57 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:57 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:01:57 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) pwrite64(r1, &(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x400]}) 14:01:57 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:57 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:01:57 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:57 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x6, 0x8, 0x8, "5f504d5b5793b2966a4b197053c09be75278bb66ad1d7eb31cd05b6958555a3582a8d83619e4d9b6485b1af5624f6952026e186caec6a08720f606b5c9045dde", "91de9bc023a8d0f83e2ef9144edfd5889866eb30e541aaddbc0ca3983bcc1567987c95bdfe7e7ad227a9b22bc5bc54776f42fff972b6b5a15a7cee667ae91f0c", "fcd9c766848f75063a5fa740b59b737ec2dc5d97c09d688d94a0253e18869668", [0x7d1]}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x8001, 0x40}, {0x6, 0xe0ee}]}, 0x14, 0x2) 14:01:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff071e000000450001070300001419001a0012000200040001000a002500"/57, 0x39}], 0x1) 14:01:57 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:57 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x5, 0x3, 0x0, [{0x0, 0x2, 0x24000000}]}, @enum]}}, &(0x7f00000002c0)=""/236, 0x3e, 0xec, 0x10}, 0x20) 14:01:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$BLKBSZSET(r1, 0x40041271, &(0x7f0000000000)=0x8000) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='\x1f\x00\xd80\xcau\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:58 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:58 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x440, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) 14:01:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f350db98dbff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='\x0f\xe8\x9bm\xa9loop?\x00', 0x0, 0x200400) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1000, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0x1}, 0x28, 0x2) write$UHID_INPUT2(r1, &(0x7f0000000040)={0xc, 0xe, "7b1fb02edc1e9eb993ecc3e079b3"}, 0x14) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:58 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x100000}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setfsuid(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000100)=0x101, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) tgkill(0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 14:01:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:58 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x7fff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@generic={0x3, 0x0, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) readlinkat(r1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)=""/127, 0x7f) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c00000011f3e5bbec67e4cb1f7fd62f60cd78f7dc98e4604b77e27835b5062a76b858e22fef809e69cbdb6e7835a51a6d1444ae51c17036cd3a84b84ff4e76e6295fc5805b45cda395508851f9e9422c51d9b2ea133e0376455bc407f9da5e6e4319826957a7b0ee0171a12ea46bf8c6550964ee51735b7a499829d44649c476c10ed45189cf8b647c1d8f2dc800259f48012ff10030e6b1b065a7c0d9d81d8f9ef42198454b81de43dcd49fe0f1ced2c1701cf4b971ec500"/196, @ANYRES16=r4, @ANYBLOB="00032bbd7000fbdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) fchdir(r3) r5 = creat(&(0x7f0000000500)='./file2\x00', 0x100) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001e40)) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) faccessat(r5, &(0x7f00000000c0)='./file2\x00', 0xff0f1c4c334adf50, 0x100) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) dup3(r6, r7, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/create\x00', 0x2, 0x0) fcntl$getownex(r5, 0x10, 0x0) r8 = creat(&(0x7f0000004c40)='./file2\x00', 0x104) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000740)=@req={0x20, &(0x7f0000000540)={'ve\x00', @ifru_flags=0x2}}) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) 14:01:58 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fff) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0xf7841fb93817b107) r7 = gettid() r8 = syz_open_procfs(r7, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r8, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfc}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22008000}, 0x4000000) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:58 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:58 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:58 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x100000}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000cd86c641d42b4e58cf056114cdcda052f854c264cc0a2909b73c5aaaca789f79f4d197a80a957b14aed4a529351e0000a1db05d69020b14e890000000000000008f5aa21c6e56d1388ffc001000082c350a97df83ff9b804266cacc98e2cc8a02ab0a891b27d4cc9c739fb3b0d3175674b9374892793b13610338aadecfe1fea6baa1e77114ca668d374b780305558e5421ce631dabc3ec115e835fcb0afc5dec79189d90f4b8e416cbd988eb323bdfef24315f8a4763f75bb24fa6623084890289772a9206697ced16a6692d48b54a7faceb84a6e163b080d1d43a837c742bf1c56996dbe9d62945f1c48b23d3be2bb73daad8cb7d93a91687e06af5211462ff8d6000000000012f64a8cd9d000cc000000000000000000000000000000000000045ed410f8b6be491baa663acdaef787ca8b83ac2a535f72828fcc751026c943172484245521c9b20a92cd63f68353482fd7dcc12a0c29ea2618da9c16801d01e309532ef44da35d39e781ad47d0b518a1a4e611b765f9334a6dc47644139a472a69f2b45b3e5fd98ba8df038512e87b666a6611feb3f3abde2363358be16936e55b6384c1d4abbb31a32d7320e0539e800417ca792f0c81ecc01a283d102809bce6f207ab2f9e1f3661be69bb0007900991dc240818d93ff0ae47ccc8ca5f9b5270ed91bca57c3fa36e8897749f45acaee420099400e9959951e73df85b1322a7330bd398adecae750520ea0d0220d5a2fd2a558ff07f61273f1c8f4c4313ef20700c5d38f36ac6fd0a1e95d6dd822894f367627371d4"], 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setfsuid(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000100)=0x101, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) tgkill(0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 14:01:58 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) io_setup(0x7ff7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r3, 0x4, 0x6100) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000003c0)=[0x7]) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f00000000c0), 0x8000fffffffe) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)) getsockname(r7, 0x0, &(0x7f0000000580)) linkat(r7, &(0x7f0000000400)='./file0\x00', r5, &(0x7f00000006c0)='./file0\x00', 0x1400) r8 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r8, 0x4, 0x6100) ioctl$EVIOCSREP(r8, 0x40084503, &(0x7f00000003c0)=[0x7]) r9 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r8, 0x20000010000, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f00000000c0), 0x8000fffffffe) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, 0x0) fcntl$dupfd(r11, 0x0, r11) r12 = dup2(0xffffffffffffffff, r11) ioctl$TCSETSW(r12, 0x5403, &(0x7f0000000100)) getsockname(r12, 0x0, &(0x7f0000000580)) linkat(r12, &(0x7f0000000400)='./file0\x00', r10, &(0x7f00000006c0)='./file0\x00', 0x1400) r13 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r13, 0x4, 0x6100) ioctl$EVIOCSREP(r13, 0x40084503, &(0x7f00000003c0)=[0x7]) r14 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r13, 0x20000010000, 0x2) sendfile(r13, r14, 0x0, 0xfffffffffffffffc) sendfile(r13, r14, &(0x7f00000000c0), 0x8000fffffffe) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r15, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r16, 0x40045431, 0x0) fcntl$dupfd(r16, 0x0, r16) r17 = dup2(0xffffffffffffffff, r16) ioctl$TCSETSW(r17, 0x5403, &(0x7f0000000100)) getsockname(r17, 0x0, &(0x7f0000000580)) linkat(r17, &(0x7f0000000400)='./file0\x00', r15, &(0x7f00000006c0)='./file0\x00', 0x1400) pipe(&(0x7f0000000880)={0xffffffffffffffff}) io_submit(r2, 0x6, &(0x7f0000000900)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x4, r7, &(0x7f0000000240)="2b2a501ec0bb35973146fcab641a3bbe15fef21e12605857d82a45745076b4dceb560d1d502c64b0611e135770078282c621a38a524d9f92ae1dcf9e4406b7e38b9f5106d9acbd4f35e467c7c4f0625f37163bf7c6b272ecf99c729e01b4f558b85a2268e54ab9cc85425dccaacda35dce91146989e1", 0x76, 0x8, 0x0, 0x6, r9}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x8000, 0xffffffffffffffff, &(0x7f00000005c0)="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", 0xfa, 0x8, 0x0, 0x2, r10}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0xba3, r13, &(0x7f0000000380)="f7c2cf896b15739c0d737452503f5d5e170174f786158d3ffc290bd5131f2ae2968eadc53103", 0x26, 0x6, 0x0, 0x1, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f00000004c0)="4a35b4840804fc23783a697eaf059a36c51f74ddb1b00f232aaf884a2d5f649482c5f8e35d734082b98851c757df7e861fbec3cbc27b60fe6dab551eb038ee82484780f2e4082f36273e", 0x4a, 0x500, 0x0, 0x3, r15}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0xf33e, r12, &(0x7f0000000700)="ae98ffcc1a2dcd3714be34c3e1ce99bb8955c4131c992ed474b62438f2e251f91d1bfbf6bc083a48f7c7a7ad3fa4ad2c16a7903900751ffbc2b90caaf24049cf02104e058c25d874c375c6e86a3b88", 0x4f, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x100, r9, &(0x7f00000007c0)="87c1dfad34557a293a817c13cdd9d003d9c1fc76d735898700bb66062a42cab33c1c7bc98e3c39a326628f413e45502600270675919d94178ec267fb5df60c38f87985eb95949bc2387359b644979ffdddf71f9cbbf0fba4133bb9b91fd6bb0b806d2d5b41a81be89729d5d2a4561d244192a750c0534c83ac8616532fee40d4a28d", 0x82, 0x80000001, 0x0, 0x1, r18}]) 14:01:58 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:58 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x100}) 14:01:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/de\xff/loop#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:01:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) fcntl$getflags(r1, 0x802) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x0) flock(r2, 0x8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x26e1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x0, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r7, &(0x7f00000000c0)={0xfffffffffffffe51, 0x0, 0x0, {0x7ffffff7}}, 0x1f1) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f0000000040)={0xfffffffb, 0x3}, 0xc) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000000)={0x6, 0x0, 0x717c, 0x783}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r9, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$FITRIM(r9, 0xc0185879, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 14:01:59 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0xf50aa13bdba8d726, 0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, "d3484e71da1b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b95dc721f14bb5d320e6063608e6", "d0dd830aba73b64279f1f5933b491ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x80000006, 0x749]}) 14:01:59 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/lo\x04\x00#\x00', 0x803, 0x20100) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) r4 = fcntl$dupfd(r3, 0x406, r0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:01:59 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:59 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r2]) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x1400) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) pivot_root(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file0\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'veth1_to_bond\x00', 0x400}) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) syncfs(r5) r9 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r9, 0x4, 0x6100) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f00000003c0)=[0x7]) r10 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r9, 0x20000010000, 0x2) sendfile(r9, r10, 0x0, 0xfffffffffffffffc) sendfile(r9, r10, &(0x7f00000000c0), 0x8000fffffffe) getsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000380)={@local, @remote}, &(0x7f00000003c0)=0x8) 14:01:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x10, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="743707eba9269a3242498dc2909bd68294b9097d034302cfdd898f0782b63252242e8de359ea5c697736af2ec715cdb56645d9002413f9fa3bb0c48ead1e075e7c47c34473ab65f9c36945da0c67e923dac8a179a0946686c1533bc9a16cbe153c9f599e058e6bb567fe8b2ecf43a85a34d26375e89414c4ed479b66b662160d246e9f5d0b718f5508c7d74ddd16be287c8bf07521a2c34dbfe9adbbfcafba1019da7b80bb9ffe3bf6be158383c3ec20ede8f7149adc31", 0xb7, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x4) 14:01:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:01:59 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0x10026}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/200, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xfffffffffffffe37}}], 0x20004582, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:01:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x1a, 0x1, "d3484e71da2b27af0584bea27b8194b5d7d024e536f4d1b7c805ed3dbdb90d5838ea843641874554d245218a8cafafb55c85b85dc721f104000000e6063608e6", "d0dd5d606f23740100000000057d0500000000000000893b89ed00000100", [0x2]}) 14:01:59 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:01:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:00 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) lseek(r0, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040)="0e45f1e44b5f143b520b5d33ba69e2b21b4f2d935375ade3cea106f7a0e252affdf4a5dff345619dd795dd9df87e0b073d38045a2da17c7740e4f700895e90be1b23523eff2dd1a020a7b2067d183a555a8d0ea962f9afa5884160af9e61", &(0x7f0000000240)=""/251}, 0x20) 14:02:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) exit(0x9) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/26) 14:02:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x5, 0x1a, &(0x7f0000000000)="dfdebe1563fe044a75fecb4e10232cd5df8b7a95b9de2b501d7b"}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1b, 0x0, 0x8, "d3484e71da2b27affe84be52af8194b5d7d024f636f4d1b7c8fafe3dbdb90d5e38ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x1, 0x749]}) 14:02:00 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) lseek(r0, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0x10026}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/200, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xfffffffffffffe37}}], 0x20004582, 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:02:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) [ 439.613312] blk_update_request: 3357 callbacks suppressed [ 439.613320] blk_update_request: I/O error, dev loop6, sector 0 [ 439.624999] buffer_io_error: 3357 callbacks suppressed [ 439.625012] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 439.638120] blk_update_request: I/O error, dev loop6, sector 4 [ 439.644127] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 439.651822] blk_update_request: I/O error, dev loop6, sector 8 [ 439.657847] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 439.665496] blk_update_request: I/O error, dev loop6, sector 12 [ 439.671599] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 439.679278] blk_update_request: I/O error, dev loop6, sector 16 [ 439.685348] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 439.693031] blk_update_request: I/O error, dev loop6, sector 20 [ 439.699129] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 439.706810] blk_update_request: I/O error, dev loop6, sector 24 14:02:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) r2 = dup(r1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) fgetxattr(r3, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f0000000300)=""/172, 0xac) recvfrom$unix(r2, &(0x7f0000000000)=""/92, 0x5c, 0x10000, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) [ 439.712877] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 439.720567] blk_update_request: I/O error, dev loop6, sector 28 [ 439.726654] Buffer I/O error on dev loop6, logical block 7, lost async page write [ 439.734309] blk_update_request: I/O error, dev loop6, sector 32 [ 439.740426] Buffer I/O error on dev loop6, logical block 8, lost async page write [ 439.748101] blk_update_request: I/O error, dev loop6, sector 36 [ 439.754167] Buffer I/O error on dev loop6, logical block 9, lost async page write 14:02:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x9) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/seliW5x\x00\x01\x00\x00\xb9\xfd\x1f\xe9', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3060071da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d24521888eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) write(r0, &(0x7f0000000180)="3b606b3dd0b68eb98cfee887235d1238d463d337236101a5ad01f4c2da55f99b0ebcb9932573c6a5d8fed30176ed350b9b3e7a6261f1f24da44c85ff", 0x3c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) dup2(0xffffffffffffffff, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r3, &(0x7f00000001c0)=0x7, 0x6) 14:02:01 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) 14:02:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) lseek(r0, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) write$P9_RLINK(r2, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) 14:02:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote}) 14:02:01 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x11, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) clone(0x8000, &(0x7f00000000c0)="58aa119698280636cb73ffc7147e12e480560ba0408d597a72aa2f0fff01d0d8fbc75a1f539637c2fa57ff00da150cd97126a427ed5353bb9c6f73c0d6f2bafd7c817e55ee6db5f2095c7b2220218233c2073d8e1213f60d98953575f348888bd268", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)="1612bf6431b4206b02a9db94b9d481f3ed6da759a8da825c906b2b123210d451a786e97afb34928e49972825d2fa9e77c7bb57d9db7271418fcd6806ff20e95235af5f55381a09ffd7b432148f1c500b86e21b52e6014a09c3bf3ec13be1eba04ab79ba1aadf36d241a822a21232c9f36d85a5cd8980994b531b415a02720be7f2c044b4afa85cc22a6dd6d61bfd4dd1fc9252bbb6d1759c2d921dcb3a59") 14:02:01 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r4}]]}}}]}, 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:02:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x293400) pipe2(&(0x7f00000001c0), 0x8000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000180)=0x60) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x53, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:01 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:01 executing program 5: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) lseek(r0, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) lseek(r0, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/looa#\x00', 0x0, 0x40042) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:01 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x00\x00 \x00', 0x308141, 0x0) write$ppp(r0, &(0x7f0000000240)="4ea9d9b6616b5998697e0188e8e911233c9c6fe50032d04559ccced2e1242cc80bc13e802c5218b9266da1e3bf2ec0b498a537e6c7f2dd8c1e098888f9b83998e8e533887c6e651115820aace514ddcf3f3a2b69f1e9da3e52e836a0f84b8cce416be97f43a0c6ef9f0ea9683e4bb282075db6d0e6d9bb3bfd974b736e45413852baf31b17adb7e8d37ba80733fcd958d8724462c62747591b99f2be05c3a7c5fe75bdde0eb110", 0xa7) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) lseek(r0, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:01 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r4}]]}}}]}, 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:02:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 14:02:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) lseek(0xffffffffffffffff, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:01 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xec00) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) inotify_init1(0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x450000, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) fcntl$dupfd(r3, 0x0, r3) dup2(0xffffffffffffffff, r3) write$binfmt_misc(r3, &(0x7f0000000240)={'syz1', "063220730ca72504b814e4f99f6eed352aac97529fd9e5a0a1eb01e4e8ea7e2d7b4e1642448e83a49d3faf4d991864cb669d3a9b21173ccf521910ac40a225dd1a53230426627541b9b2460c245a7a42bbb2c9fd19601851af3e606ada0de50c131987703549357a5bf8c489e1f26493a57cdf8d11eced472926aa97c5c05290cd2beabbeb5bdfa3edec45f2698bd8b0017593bcc6b4cc2cc70ace371ccce3ee1d53773d78f63eff3d4e94dc79062fea7c03245fd44be220eb858236c2212677f8d8e96985fe05a32e8d3302de08e658c483ffc5156a022c06fcde944b6fa8532c5077fa0917f224471255d0b5"}, 0xf1) setns(r1, 0x40000000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 14:02:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(0xffffffffffffffff, r3) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)) getsockname(r4, 0x0, &(0x7f0000000580)) linkat(r4, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) r5 = dup3(r2, 0xffffffffffffffff, 0x80000) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r6 = fcntl$dupfd(r1, 0x0, r0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0xf, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:02 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) lseek(0xffffffffffffffff, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) 14:02:02 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) io_setup(0x1000, &(0x7f0000000140)=0x0) io_submit(r1, 0x20000103, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 14:02:02 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:02 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:02 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:02 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:02 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) lseek(0xffffffffffffffff, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x501000, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r3, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000001c0)={0x0, 0x60, 0xa00, 0x0, 0x1, 0x5c, 0xff, 0x5, 0x1ff, 0x7, 0x7ff, 0x5}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x1) 14:02:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0xb5a0, 0x6c}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) 14:02:02 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:02 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) lseek(0xffffffffffffffff, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:02 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0xa) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="12cb96df", 0x4) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="eb00000092"], 0x5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 14:02:02 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000040)) 14:02:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000017, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x9, 0x200) open(&(0x7f0000000000)='./file0\x00', 0x103000, 0x20) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r3, 0x6) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000003c0)=[0x7]) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r4, 0x10003, 0x1) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f00000000c0), 0x8000fffffffe) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = dup2(0xffffffffffffffff, r7) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000100)) getsockname(r8, 0x0, &(0x7f0000000580)) linkat(r8, &(0x7f0000000400)='./file0\x00', r6, &(0x7f00000006c0)='./file0\x00', 0x800) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r9, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r9, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, 0x0) fcntl$dupfd(r10, 0x0, r10) dup2(0xffffffffffffffff, r10) fstat(r5, &(0x7f0000000640)) fcntl$dupfd(r2, 0x0, r3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, 0x0) fcntl$dupfd(r12, 0x0, r12) r13 = dup2(0xffffffffffffffff, r12) ioctl$TCSETSW(r13, 0x5403, &(0x7f0000000100)) getsockname(r13, 0x0, &(0x7f0000000580)) linkat(r13, &(0x7f0000000400)='./file0\x00', r11, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCGVERSION(r11, 0x80044501, &(0x7f0000000240)=""/234) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r14, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r15, 0x40045431, 0x0) fcntl$dupfd(r15, 0x0, r15) r16 = dup2(0xffffffffffffffff, r15) ioctl$TCSETSW(r16, 0x5403, &(0x7f0000000100)) getsockname(r16, 0x0, &(0x7f0000000580)) linkat(r16, &(0x7f0000000400)='./file0\x00', r14, &(0x7f00000006c0)='./file0\x00', 0x1400) setsockopt$sock_int(r16, 0x1, 0x2a, &(0x7f0000000080)=0xfffff6d6, 0x4) 14:02:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10f, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008da0}, 0x20000000) 14:02:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xc0, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0xfffffffffffffc5d, 0x1, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @empty, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa491, @mcast1}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x200c489e}, 0x8000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:02 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:02 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$KIOCSOUND(r0, 0x4b2f, 0x90) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(0xffffffffffffffff, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x1, 0x5, 0x60fc, 0x6}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)) getsockname(r2, 0x0, &(0x7f0000000580)) linkat(r2, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x600}) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) 14:02:03 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:03 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:03 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:03 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000), 0xb}, 0x38f) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() r2 = socket(0x0, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) tkill(r1, 0x36) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) 14:02:03 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) lseek(r0, 0x20000010000, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:03 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:03 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x5, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x50080) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80041272, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 14:02:03 executing program 3: r0 = socket$inet(0x2, 0x800, 0x80) getitimer(0x3, &(0x7f0000000080)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x5, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) [ 443.027403] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 443.038109] devpts: called with bogus options [ 443.056438] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 443.065438] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 14:02:03 executing program 5: r0 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) getsockopt$inet_tcp_int(r1, 0x6, 0xc87db72fbb82f75d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r0, 0x1000, 0xce}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'streebog256\x00'}}, &(0x7f0000000240)="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", &(0x7f0000001240)=""/206) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:03 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) lseek(r0, 0x20000010000, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x3, 0x101}) [ 443.085447] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 443.101061] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 443.108568] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 443.127592] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 14:02:03 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) lseek(r0, 0x20000010000, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r2, 0x6) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) fgetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="757365722e6367724bec20298cbf402f00"], &(0x7f0000000040), 0x0) [ 443.149551] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 443.165688] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 443.173049] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 443.181215] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 14:02:03 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) [ 443.201243] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 14:02:04 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:04 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:04 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:04 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) 14:02:06 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:06 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000015c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000003c0)=[0x7]) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r2, 0x20000010000, 0x2) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r4, 0x0) setxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x4, 0x4}, {0x7, 0x401}], r4}, 0x18, 0x2) sendfile(r2, r3, &(0x7f00000000c0), 0x8000fffffffe) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000000)=0x1) ioctl$sock_proto_private(r1, 0x89ec, &(0x7f0000001600)="36c70b31a75a6ec5a9bd8869a0c491e13191ca49727f0510d719a7a52d9d6fe56494f93b233263ed1ea217f1d3603d9b0d28f7252bcfd1fc033bd16b868b3336ef74b0cd6fe5cd5cd12816a6476431e1049c52b26fc4e4c4cbf4") 14:02:06 executing program 5: prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:06 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0xffffff01, 0x6, 0x2, 0x53131445, 0x3}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80241, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000180), 0x80800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000cc0)={r5, @local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2040008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x40, 0x65, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xa}, {0xfffb, 0xffe0}, {0xb, 0x1802c}}, [@TCA_RATE={0x8, 0x5, {0x3, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x807) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r6, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000300)) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x800) 14:02:06 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0x10026}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/200, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xfffffffffffffe37}}], 0x20004582, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:02:06 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) [ 446.131170] blk_update_request: 2452 callbacks suppressed [ 446.131178] blk_update_request: I/O error, dev loop6, sector 0 [ 446.142869] buffer_io_error: 2452 callbacks suppressed [ 446.142877] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 446.155827] blk_update_request: I/O error, dev loop6, sector 4 [ 446.161862] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 446.169562] blk_update_request: I/O error, dev loop6, sector 8 14:02:06 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:06 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:06 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x7]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:06 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x7]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) [ 446.175559] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 446.183249] blk_update_request: I/O error, dev loop6, sector 12 [ 446.189335] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 446.197009] blk_update_request: I/O error, dev loop6, sector 16 [ 446.203502] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 446.211230] blk_update_request: I/O error, dev loop6, sector 20 [ 446.217314] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 446.224948] blk_update_request: I/O error, dev loop6, sector 24 [ 446.231032] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 446.240941] blk_update_request: I/O error, dev loop6, sector 28 [ 446.247007] Buffer I/O error on dev loop6, logical block 7, lost async page write [ 446.254727] blk_update_request: I/O error, dev loop6, sector 32 [ 446.260807] Buffer I/O error on dev loop6, logical block 8, lost async page write [ 446.268457] blk_update_request: I/O error, dev loop6, sector 36 [ 446.274514] Buffer I/O error on dev loop6, logical block 9, lost async page write 14:02:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) bind(r1, &(0x7f0000000040)=@nfc={0x27, 0x1, 0x1, 0x7}, 0x80) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:07 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/250, 0xfa, 0x6, 0x80000001, 0x2}, 0x11c) 14:02:07 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x7]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x17, 0x11, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x4ed, 0x5771]}) 14:02:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0x10026}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/200, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xfffffffffffffe37}}], 0x20004582, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:02:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0xe92, 0xc000]}) 14:02:07 executing program 4: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:07 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) write$selinux_load(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x9a) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9bfd, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x13, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "c0dd830aba7372061e0400f3f3741ecd5dff3b3e0a000000000000b6f14c8cd4"}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x202002, 0x20) write$UHID_INPUT2(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0c000000c2004fa721c0e22c20759e06ade31f291e4c4cecdbc39b71275b8456f29f7a74a1af6790aac60115c2c8337da07ac475e6adee10415ab5183fb5aac862de6bf36c5401e77114da998df5fc1b9542e3b8bdf789415494f16985211db65288cdfe3d98657d83945003801d6c8c01f631266dde242a7ea5a3ce32d64843c363b2730e999cf9cf58ec33ef2cd0e8e4447148c4cae463919b9eb108af5d82fd7eb970c1dfa8b77b8a5a1033457673bba65db0310827b5be7b1ee859072fab17eec942dc441ede8fe6d7ae8bc5471bc60eb8e688e537a83a3878db"], 0xc8) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000003c0)=[0x7]) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r2, 0x20000010000, 0x2) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f00000000c0), 0x8000fffffffe) lseek(r3, 0x8, 0x2) 14:02:07 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(0xffffffffffffffff, r1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)) getsockname(r2, 0x0, &(0x7f0000000580)) linkat(r2, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x370, 0x19, 0x400, 0x70bd2d, 0x25dfdbfb, {0x4}, [@nested={0x344, 0xa, [@generic="9be0dcdba8d6ac9628c994e5a5528b8693ff6632a88dddf7d65dfd1a5270f4dafd51e2f49e4bd1f291384a0b8c1d73c8c55429dc", @generic="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", @generic="8026885bc084cb814cf8ff29355b878f21ca1b42aa20d05201cd8cf0d61b83", @generic="8f15e130", @generic="a7caf4249f47ed59499af4a9e7b0b7cb6729ab0cd702b5bfbbf4c6e7ea8c42e332a23385fae555643873f0d853eda42868ea8cb93c617d5caa5d4f22068e5f0a28695de86b9be1d1761e707687cbccb537751b81955435a7581afa6ed2124655a1f8bbf91f3f51c0b8c73a57ecda6395da4a9e01e4472521f0751a97954a586b44739d8671497038c7d5e68622", @generic="dd4a423eb71b012280b8a72bfc8c5f14379e1463c0db60679cf76fce8240cf09cf5dbbe0a27f2cb85fb1d36eb70ce37794d59dc914f5a79398cfdd0e2c9cfc5c8f554616754843403197e7db0698ddd35b2f576ab7fb12dc4f0f23f9ecb2618b3fba6a15f44a442e0b629d91a3556b32dda834c783b1acf569ea35686cb71e31f4d9728102971e4b5664ec659ec2ae09ae5bc7f6ddc994ed0ac681e45ab252960c0ee7b3843299ae85fa7f1dc27eb7b98e30cd836be97ed96d9649e5c54bea60ecaacf61e72934", @generic="3729214346924d777d5374dcd8d6612ed125edd4b65b943cc99ff81cf8cb766b5e6a07b3c3f61decebe54c07939ab5c0e5b2f41768fba8786ed64626f05df0fa62663e21b0fa69f883b5c5588cc5bc3c39ed9db0bfb599a0ad671c5b276577355009383f67fbaa2fe1592108a3b33642f20387452a2ae5b8cf0466f23849813e02f68401666561e537ce51de09df36209d1884ad71"]}, @generic="07d1cec8be739d4b9c6e0bc92315b5f9f967e6428db3"]}, 0x370}, 0x1, 0x0, 0x0, 0x20040020}, 0x88) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:07 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:07 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:07 executing program 4: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:07 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r0, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) sendto$unix(r0, &(0x7f0000000000)="f30735143d63b0755a32e6c01d53f5f0716d59bcc2cf5914b2b361f3f6d6f3c28d3c57d375c94090021299f541837a70dd871b952a489f4ceb44f2ef4e6e89086e49e543a1cfff5b36286dd410bab974d3edd45b776c9363f148ca29ecf51b0a7ed2bb4d300230e0600f", 0x6a, 0x4000, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x85a400, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000080)=0x0) r5 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r5) keyctl$get_persistent(0x16, r4, r5) 14:02:07 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:07 executing program 2: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = dup(r1) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKGETSIZE64(r3, 0x80041272, &(0x7f0000000180)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4f800) write$P9_RATTACH(r4, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x1, 0x2, 0x2}}, 0x14) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="11183770bb8b53fa9fdc6f7b8d3449edabd6f5b352dbf9f5a64e8e8e2f9981048eb297282bc0ad80bace6179df9e73d089dd051c5c887e611479f9fa586d6c", 0x3f) 14:02:07 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:07 executing program 2: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) ioctl$TIOCGPTPEER(r0, 0x5441, 0xbd59) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:07 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:07 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:07 executing program 4: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0x8, {0x3, 0x9, 0xee1, 0x7ff, 0x401, 0x2000000}}) 14:02:08 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) gettid() 14:02:08 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:08 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:08 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3b) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x40000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798a8211b6f14c8cd4"}) r2 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0xffffffffffffffff) write$input_event(r0, &(0x7f00000001c0)={{}, 0x2, 0x5}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, 0xfffffffffffffffe, 0x1) 14:02:08 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:08 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x12, 0xb, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:02:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:08 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:08 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:08 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x10040, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0xfffe, 0x6, @rand_addr, 0x9}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x4d60b7c227e1eb30, &(0x7f0000000040)={0xa, 0x2}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"/714], 0x29d}}, 0x0) recvmmsg(r6, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) prctl$PR_SVE_SET_VL(0x32, 0x12acc) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000640)=ANY=[], 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) fchdir(r3) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r7, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r8, 0x10e, 0xa, &(0x7f0000000280)=""/216, &(0x7f0000000100)=0xd8) r9 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'U-', 0x2}, 0x28, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0xfffffdef) syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') 14:02:08 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:09 executing program 5: syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @remote}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x155) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x0, r2}) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) fcntl$dupfd(r5, 0x0, r5) dup2(0xffffffffffffffff, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r9, 0x6) ftruncate(r9, 0x1080) write$ppp(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(r8, 0x0, 0x80000836) socket(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup2(r3, r4) open(&(0x7f0000000100)='./file0\x00', 0x400042, 0x20) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r10 = gettid() tkill(r10, 0x16) sendto$packet(r1, &(0x7f0000000180)='z\b', 0x2, 0x3ffffff, 0x0, 0x0) 14:02:09 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:09 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:09 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:09 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:09 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) [ 448.406111] audit: type=1400 audit(1574431329.157:48): avc: denied { read } for pid=1380 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 14:02:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r2, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = dup2(0xffffffffffffffff, r5) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r4, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, 0x0) fcntl$dupfd(r7, 0x0, r7) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r8 = dup2(0xffffffffffffffff, r7) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000100)) getsockname(r8, 0x0, &(0x7f0000000580)) linkat(r8, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000001340)=[0x4a0, 0xffffffff]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xb4a00, 0x0) uname(&(0x7f0000000180)=""/108) keyctl$read(0xb, r1, &(0x7f0000000340)=""/4096, 0x1000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:09 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:09 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:09 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x181a00, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x9) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:09 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 14:02:09 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:09 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:09 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) sched_rr_get_interval(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/sockcreate\x00') ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x83, 0x11a, 0x1b39}) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:09 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:09 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:10 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:10 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r0, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r1, 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') sendmsg$nl_netfilter(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000000240)={&(0x7f0000000c40)={0x1098, 0xe, 0x5, 0x400, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x7}, [@typed={0x8, 0x18, @str='\x00'}, @typed={0x8, 0x1f, @pid=r4}, @typed={0x8, 0x88, @pid=r5}, @generic="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", @typed={0x8, 0x14, @str='\x00'}, @typed={0x8, 0x33, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x14, 0x4e, @ipv6=@dev={0xfe, 0x80, [], 0x2a}}, @generic="acf9e7e197ce6c5611f3fb4befd53a0b56e4aefaf7e6e81872cbfccf100ac0af16d5d595c99c37d624de346bc834f9ac5dbb61df1ae7bf66", @typed={0x10, 0x59, @str='/dev/loop0\x00'}]}, 0x1098}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r2]) fchownat(r0, &(0x7f0000000000)='./file0\x00', r1, r2, 0x400) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:10 executing program 2: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x800, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/28) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)="757695fba2592f0f6e7e2c199100291322a26858ea07a25ef3565b9482f9d06989a2da3df81c315674") 14:02:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r2, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = dup2(0xffffffffffffffff, r5) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r4, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, 0x0) fcntl$dupfd(r7, 0x0, r7) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r8 = dup2(0xffffffffffffffff, r7) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000100)) getsockname(r8, 0x0, &(0x7f0000000580)) linkat(r8, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000001340)=[0x4a0, 0xffffffff]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xb4a00, 0x0) uname(&(0x7f0000000180)=""/108) keyctl$read(0xb, r1, &(0x7f0000000340)=""/4096, 0x1000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:10 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:10 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:10 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:10 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:10 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x8000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = socket$netlink(0x10, 0x3, 0x3) fcntl$dupfd(r2, 0x0, r1) r3 = dup2(0xffffffffffffffff, r1) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r5, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) readahead(r5, 0x9, 0x80) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000cc0)={r7, @local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@ipv4_deladdr={0x84, 0x15, 0x4, 0x70bd29, 0x25dfdbfe, {0x2, 0x1, 0xc4b5d178b0dac004, 0xc8, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x9, 0xfff, 0x780b}}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x80, 0x3, 0xfffd, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0xd3, 0x7, 0x8, 0xfffff3b6}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x84}, 0x1, 0x0, 0x0, 0x8c0}, 0x800) linkat(r3, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1400) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r9 = dup(r3) ioctl$SNDRV_TIMER_IOCTL_STATUS(r9, 0x80585414, &(0x7f0000000000)=""/6) 14:02:10 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r1, r3, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="e5"], 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r6, 0x6) openat$cgroup(r6, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) pipe(&(0x7f00000000c0)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syzkaller1\x00', 0x10) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) [ 449.554256] audit: type=1400 audit(1574431330.307:49): avc: denied { create } for pid=1505 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=tcp_socket permissive=1 [ 449.593854] audit: type=1400 audit(1574431330.347:50): avc: denied { setopt } for pid=1505 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=tcp_socket permissive=1 14:02:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r2, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = dup2(0xffffffffffffffff, r5) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r4, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, 0x0) fcntl$dupfd(r7, 0x0, r7) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r8 = dup2(0xffffffffffffffff, r7) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000100)) getsockname(r8, 0x0, &(0x7f0000000580)) linkat(r8, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000001340)=[0x4a0, 0xffffffff]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xb4a00, 0x0) uname(&(0x7f0000000180)=""/108) keyctl$read(0xb, r1, &(0x7f0000000340)=""/4096, 0x1000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:10 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/239) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x5, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') getpriority(0x3, r1) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) 14:02:10 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) sched_rr_get_interval(r1, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='projid_map\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:11 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:11 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_rr_get_interval(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_tables_targets\x00') ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xa, 0x5, "d3484e7eda2b27affe84bea2798194b5d7d024e536f4d1b784f4fe3dbdb90d5838ea843641874554d245218a8eafafb50900b8d320e6063665e6000400", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x0, 0x4]}) 14:02:11 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800017, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) prctl$PR_SET_FPEXC(0xc, 0x1) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000000)) 14:02:11 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x15, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d8b7c8fafe3dbdb90d5838ea84bca5f15854d245218a8eafafb55c85b85dc721f14bb5d3fde6063608e6", "d0d4830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd6"}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) sched_rr_get_interval(r5, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000240)={0x64, 0x37, 0x1, {0x0, 0x7f, 0x9af3, r5, 0x46, 'attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f'}}, 0x64) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "70a089cc592067b65553cfa5dd154658c8c794e3f5efe59c46e11bf0737bb27cb34cab49fde798c7325507af51b1472e5bd6d02eacffb624da15c0a5f31262b48f79c5bd006ed6e0f60571acceaa975336bbddae456f18388d53e151114fa2b93e92c3d54dd8d6261804fbc0d875fcb0d3df1a8801a3daaa0ad1651308c1f24d4b730496bae651f8541ff245"}, &(0x7f0000000180)=0xb0) 14:02:11 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x5) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r3, 0x6) tee(r2, r3, 0x8fb, 0x5) 14:02:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r2, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = dup2(0xffffffffffffffff, r5) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r4, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, 0x0) fcntl$dupfd(r7, 0x0, r7) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r8 = dup2(0xffffffffffffffff, r7) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000100)) getsockname(r8, 0x0, &(0x7f0000000580)) linkat(r8, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000001340)=[0x4a0, 0xffffffff]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xb4a00, 0x0) uname(&(0x7f0000000180)=""/108) keyctl$read(0xb, r1, &(0x7f0000000340)=""/4096, 0x1000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r2, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000280)=[{{}, 0xa, 0x3, 0x1}, {{r3, r4/1000+30000}, 0x17, 0x3ff, 0x4}, {{0x77359400}, 0x0, 0x6, 0x8}], 0x30) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)) getsockname(r7, 0x0, &(0x7f0000000580)) linkat(r7, &(0x7f0000000400)='./file0\x00', r5, &(0x7f00000006c0)='./file0\x00', 0x1400) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000180)=""/21, &(0x7f00000001c0)=0x15) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0xed, 0x1, 0x1, 0x7, 0x0, 0x81, 0x100, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x4, 0x7}, 0x1c200, 0x7, 0x1, 0x3, 0xfffffffffffffffe, 0x5, 0x80}, r1, 0x10, 0xffffffffffffffff, 0x8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400017, 0x0, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641876554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) restart_syscall() 14:02:11 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:11 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r1 = syz_open_dev$loop(&(0x7f0000000000)='\x0fd\x00', 0xa2, 0x401100) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000007ffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) fcntl$getflags(r5, 0xb) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) dup2(0xffffffffffffffff, r6) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r6) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="eb6c186d61934eb20200000000000000129124a9116174b3cc2dc63fadc33b7cc42313ba127d7915a317000000000000", @ANYRES16=r3, @ANYPTR=&(0x7f0000000480)=ANY=[]], 0x3}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000, 0x4010, r4, 0xdef5d000) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x258, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x4, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xfffffffffffffdeb, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x43}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x3c}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @empty, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000001, @ipv4={[], [], @local}, 0x80000000}}}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0xc801}, 0x845) 14:02:11 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:11 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:11 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:11 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) add_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="bf15ed9146718b9c497a47537e96deeb83a13dad557ac62994ff419b01028bd2a17d4d1a2629b6363586ec106ed1bd4fe1c9ed3adcf9a8f2dc68f8b040171269ea", 0x41, 0xffffffffffffffff) r2 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r2) r3 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r3) r4 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000180)='user\x00\xc7\r\xfd\xc4Vs\x82\xb1', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r4) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r4) r6 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r6) request_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='trusted\x00', r6) keyctl$link(0x8, r3, r5) 14:02:11 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:11 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(0xffffffffffffffff, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) [ 451.150962] blk_update_request: 2713 callbacks suppressed [ 451.150974] blk_update_request: I/O error, dev loop6, sector 0 [ 451.162659] buffer_io_error: 2712 callbacks suppressed [ 451.162664] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 451.175702] blk_update_request: I/O error, dev loop6, sector 8 [ 451.181715] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 451.189398] blk_update_request: I/O error, dev loop6, sector 16 [ 451.195473] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 451.203158] blk_update_request: I/O error, dev loop6, sector 24 [ 451.209229] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 451.216903] blk_update_request: I/O error, dev loop6, sector 32 [ 451.222991] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 451.230673] blk_update_request: I/O error, dev loop6, sector 40 [ 451.236783] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 451.244468] blk_update_request: I/O error, dev loop6, sector 48 [ 451.250563] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 451.258237] blk_update_request: I/O error, dev loop6, sector 56 [ 451.264293] Buffer I/O error on dev loop6, logical block 7, lost async page write [ 451.271956] blk_update_request: I/O error, dev loop6, sector 64 [ 451.278038] Buffer I/O error on dev loop6, logical block 8, lost async page write [ 451.285679] blk_update_request: I/O error, dev loop6, sector 72 [ 451.291757] Buffer I/O error on dev loop6, logical block 9, lost async page write 14:02:12 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)) getsockname(r7, 0x0, &(0x7f0000000580)) linkat(r7, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000001340)=[0x4a0, 0xffffffff]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xb4a00, 0x0) uname(&(0x7f0000000180)=""/108) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:12 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:12 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(0xffffffffffffffff, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:12 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000040)='\x0euser+proceth0)&GPL@cgroup,\x00', 0xffffffffffffffff}, 0x30) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x1, 0x9c9b, 0x8001, 0x1, 0x63d2}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xfff) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x3ff]}) 14:02:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x180, 0x0) pause() ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) 14:02:12 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(0xffffffffffffffff, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:12 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:12 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:12 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r0, 0x6) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r2, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="790000007d0200000064000200000800000804000000040000000000000000000012ff0700000100000004000000000000000d002d245e2c73656c696e7578402c0a00766d6e65743073656c6609006367726f7570656d3111002f64653c427667615f61726269746572000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4], 0x79) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x40000007ffff) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYPTR=&(0x7f0000000480)=ANY=[]], 0x3}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400488}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="00082dbd7000fedbdf251100000034000600080001000100000008000100010000000400020004000200080001004aa7000004000200080001000008000004000200200007000c0004000300000000000000080001000500000008000100010000000c0001000800030002000000"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000f40)="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", 0x1000) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x8, @ipv4={[], [], @empty}, 0x1}, {0xa, 0x4e20, 0x9, @mcast1, 0x4}, 0xaef, [0x6d9206b1, 0x3, 0x0, 0x9, 0x9, 0x7ff, 0xe059, 0x1f7a]}, 0x5c) 14:02:12 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x13f) 14:02:12 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:13 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:13 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x406100, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x2002, 0x0) renameat(r0, &(0x7f00000004c0)='./file1\x00', r1, &(0x7f0000000540)='./file0\x00') r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='/dev/loop#\x00', &(0x7f0000000080)='\x00', &(0x7f0000000180)='vboxnet1vboxnet0-$em1', &(0x7f00000001c0)='/dev/loop#\x00', &(0x7f0000000240)='*@#cpusetwlan0-cpuset--\x00'], &(0x7f0000000440)=[&(0x7f00000002c0)='/dev/loop#\x00', &(0x7f0000000300)='%trusted#)selinuxppp0self$selfem0vmnet0\x00', &(0x7f0000000340)='\'*vmnet1\'\x00', &(0x7f0000000380)='.vboxnet1lo!keyring\x00', &(0x7f00000003c0)='+eth0keyring\'\x00', &(0x7f0000000400)='/dev/loop#\x00']) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r3, 0x4, 0x6100) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000003c0)=[0x7]) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) openat$cgroup_ro(r3, &(0x7f0000000600)='rdma.current\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f00000000c0), 0x8000fffffffe) bind(r4, &(0x7f0000000580)=@caif, 0x80) 14:02:13 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)) getsockname(r7, 0x0, &(0x7f0000000580)) linkat(r7, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000001340)=[0x4a0, 0xffffffff]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xb4a00, 0x0) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:13 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, 0x9, 0xffb7599959816767, "e392c6921136fbb4dca443ba59b1721baee4d4d7303134ba9f3c95d4e1467b6cbe967a3ad9f623eb803a7d36a2bee1932ec140bf13c782ec6d99da911ec685e2", "da849afbae5006fe7c3a0e52e77b0d726950330107f79715bc908b35bd740884", [0x3, 0x8]}) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) dup2(0xffffffffffffffff, r4) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f0000000180)={0x7, 0x9}) r5 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x248402) ioctl$TIOCSIG(r5, 0x40045436, 0x2f) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{r6, r7+10000000}}, &(0x7f0000000080)) 14:02:13 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:13 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:13 executing program 2: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0x1) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3ff, {{0x2, 0x4e23, @remote}}}, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f30000cd5d493b5c8f3f07e08aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:13 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:13 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffc, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x9, 0x2, 0xb31, 0x3, 0xf, 0x1, 0xff, 0x7f, 0x8, 0x5, 0x4, 0x6}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:13 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) ioctl$RTC_IRQP_SET(r1, 0x4004700c, 0x142f) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r3, 0x4, 0x6100) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000003c0)=[0x7]) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f00000000c0), 0x8000fffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4004240b, &(0x7f0000000180)={0x5, 0x70, 0x7, 0x2, 0x0, 0x3c, 0x0, 0xe05, 0x100, 0x12, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x402, 0x6, 0x0, 0x7, 0x9, 0x9, 0x3}) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000040)=0x1c) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:14 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)) getsockname(r7, 0x0, &(0x7f0000000580)) linkat(r7, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000001340)=[0x4a0, 0xffffffff]) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:14 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000001300)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:14 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372063ec3f3f3f3741fcd5dff3b5c8f3f07798aea5ab6d400", [0x401, 0x749]}) 14:02:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000040)='./bus\x00', 0x100, 0xd3) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) sendfile(r1, r3, &(0x7f0000000080)=0xfffff7ff, 0x6) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) mlockall(0x4) 14:02:14 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:14 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:14 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:14 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:14 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:14 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)) getsockname(r7, 0x0, &(0x7f0000000580)) linkat(r7, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(0x0, 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/lnop#\x00', 0x1ffffc, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x280, 0x0) syz_open_dev$loop(0x0, 0x0, 0x182) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/checkreqprot\x00', 0x10000, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xf1edfc75f2166067, 0x0) socketpair(0x9, 0x0, 0x7, &(0x7f0000000180)) getpeername$packet(r1, 0x0, &(0x7f0000000240)=0x1e0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) dup2(r3, r2) getsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f00000001c0), 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x40000, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x10000000000f0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x800}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x20, r4, 0x0, 0x0, 0x0, 0x0, 0x3}]) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES16, @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x240000a7}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[]}}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = dup2(0xffffffffffffffff, r8) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000100)) getsockname(r9, 0x0, &(0x7f0000000580)) linkat(r9, &(0x7f0000000400)='./file0\x00', r7, &(0x7f00000006c0)='./file0\x00', 0x1400) bind$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e22, 0x101, @local}, 0x4325286f5c47c04) 14:02:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5a05000000d4", [0x20, 0x3]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = dup2(0xffffffffffffffff, r5) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r4, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$LOOP_SET_FD(r1, 0x4c00, r6) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="b00933dcb64725467db640379c292b7f37e0359feeee9f6036cadb00b82cedc678ffed79bf0f86b0f7f39a43729686b10a9b629854cce49eedbf10d3333f29591f1dce8ddd7d8cc268a1c00f9c7b8a7542029126e30fb19d1fa0cd6f18d75a0098b0beab62eed7c5d589cef47417a20b2f13e30535483f8e5c339629957b11a10c2e204e4c664625dc631ca072299cc38019d421ad10540def55154d5d289f46005f8d22c572ea6557b007ea802013bbc1416e8fdf51984f0d50dafec17147a5bb4ed35a992b0aa605d82c7730401ac81b16d1e9a467c6debcc1299c669f007ea8a0e0ad0d2679b2be596e529ba09139b829bb7333ef9baeef9a594b3c52dd1df669e7d91f3b63d5f454dfbb990db9c47f9f887085c6dd3491af99f9df7c055867796255bb48b9ebc48f12d14928b408ca05315fd9dddb8ed96bc2d84d10cbca90cfef96f5b5fd9b66497fdb48a8bcf80f341c9fb23374fe7b854b1c2496e775ee02e58d692cbc4052f1f97a585290f4772e3d0ab43ffc7a5b24986b839aeae4d8f3d30fbd968e72cdca4869cf17501f4dd1887c002605bc41441425e78481251e4e78021e256c12f8c880860550c9ebd420653bae0a8673ef8013708e49b9507e140c307819feb6ec4fb256d7467560fedfc04e76076d8e5281363c10e7e38cd2f86a6b31772255b59c858c2a66e89e5ccd70c6b635b3c6219f1914a53e632bec98ffe387a184ccd7fd5e46a2fa4e875da3ca91b3bfb54b27ec7b9cf4164a165398df082e6b39a858d6eec5750f2519d88b4fd6178c1ffb038d0dea5257804022c2d502eb807f0c0eb9f9210e7544712e35f8fb6d28ce1458a0c14b1f8cca6d014210d3e7d879f1b5bcbce7454f151e5524a2d37b098df30a2ef1b2a6451909f464a7fc193aeff36df5670a020a4cf5803b8c28dca1347c31de9e7ca9f970703d1b5e65f98ce86d5d0254b1a072f9c327af745b12d0c38bb2c637995e5f50619c92cbc82a85cf5cfcbe7587883155e86462194179b7a75be9837848d1e8e7828e1e2e0cb4bd2c4af16f21a966adab63a6a71a187b868411abcaeae3b4caace9fde9ef3639a09b0b77288a9a34b8fa256c5b28de341ff0921db1fc1fb8e9a00ad630fe63bcbe65ba235464acdc0edf652d24818470f449f66982735564758dcebab8395cfd903fde5471e0a88be4913969de3608f1862e6fa668043573eb923bda160f1736d0fec268375c5a59d9504a0c8ab29599c40d0ba04eb59c644ba77d98b8795e1c35f452821cff3ada5a4ee40e25c481daf5c9c95f30ceb51bcdd5ddc46fd282ddd93d9bc5b1b9e62465f280a459bb11996d8b64f2a91e784787e7e8c60c3cde88cf10157dac4090ebef54c78fda9d7f0726ff2a809529f82272162ddc3872d7d70829752532ec486022083553179b2e33ba796e8e0694092de7d2c9b21eaa383ee8987dda2c51ef337eb6810963249d40c0138a8b8b9819e3ed097839788ca0f733d5dde1d008d3652d4a9ee9977f746b294cb83c5a907593c09bb25d9890b3fb9249ff93ef0e9ebb4d14e99c2b7fef92b057607e6d8685e7ef0f7dd268c1bda97653056c04afa730c273f0dfa5a7c2d7eb1c25afe4d45071a3f0a3e3eb92e001d36c65e28f142aab8a647f09e78f91ea3b30f7df8f0752925b9b70a6e328af015a01d7825851dd2a603e0412bc6a3fababed953c86fcd972efd2f3c2b52ca2e9135f4121af9064c75ca63d0c69e0b8e815c31b436e5ee7d605f8492c37d6b7baf71a6d20e8a02b036f68966969604e780c845b53c4ae9641d1924550b27d94ba1c27d770e3b8347b26abfa782779bd0801744b4311c5b04f84df5214d52b4e230f1c10490113214a38d66edb53b905589f8ebf605918dabb4dafd8bd17a4343298743d285d03f6223e24425978b00b3a7fa3f4ca7ed2c368683711d28b61b9902dbbcf880808ba3ee1147cd9fa47f5dc9a0870b768236790d0cc4a20dd0963803da63f791390b05f51081ec8656f02d44bcad6e855e479a039591f3842438c2229198569c03893372395044edcec1a362fc9a840878dc5c8bc9c191a21d4a110a96e56cc98e156b3c339de7d754bc667f71e008fd64cf5af6fda3ef686c7fceedc67463743a9384224e9076ff1b8b1ac83c1799dee9dbbf9d94c2d063bec3d27b5a84a0c0caad3fb3351379e0cc3160246801a808e5bffbc630f7206b506028c1917f1f784a2b19fa44b6f2cb2543375233a9da572fa35936166b3a64d2a910d8114b3f24da179fcc48203f05945d7eeab060244bc6730def507d76004b0eef4d2fd7d201b6e06421eea4075f729a179a4b8475a2121eba8475a4ef5659a3f29b277e940bf3c8994da6fb5e1a052758dccf6e29a0a882471fb0366b658196b951e4a5dc6f6f4a0c6b422f54ab732d53d798a97f3ef451f8246a1676d109996908a3536acef2ebd873cad7bbec2e3ac8c2cce1e3aa1e853f9a3671dca10564c99d45c018fa301f87f13eee3258517b2381fd347d53f953c93dd958fea97a1b90bae5b44d1efcbc71c37dd5ee9717a97e9154ae4d009e61dc3ce2714edcbaead296187a1ca11f2235c63a01bdbe76eee174f345a60556c79b697ee78a703690f2b8f905b85469efda5fcf7cf1d069ba39e92dc6777a1e3e34b8f09d3b66ded00f3168377e5fcf1e35789ef80fedac1b9f0681e418fe6cbbd8a2271fe16a0464db196b501486d426c247fb635a1af6bf2deb772d7425999f7d644b32dcc86d4840d010a1e409d01ab62953d5dde676453ea391315db98ba5d09fdc6f581ab70c302f94812a0fbaa840097c37b61b406763198faec9fd056bf8e5486ce59c82564ea326c4831cb5148a402c12f823a132b9863aa4457741ca131d8332626691239dc52a43c070ed2cc5f28e2e46cd7b2d7e9d4569ccc5fb49484b850f780be128b40586c177cb25f99e1fdada58a389116a4486117781606a29236a197a1a3e35cca7f966c9e0a8daf9e9f9e5d6960b41692ed082e4a230197d7f129fe0b0944c35946dce9742275df169cc7a8df7a83f0477430040641fcae4666fcf63504dd4dd2075a15c532976a62d6919db06bd4bb70eb335b7443a3d6cd8b335c83cc407974f36b6425e4d395bc5848a386125ec23014044edaa7cddfa06a6c9e618f565825e8b73430499ffc7cf33e3bedab4dea68bb41a333c1e753cc5be6b8e0fcf32f29a9823babdb59eb9afe0a686eac3db330e0140653baefc244a76978879ba5a849e3c1703b4b14e35654ce7ede583f4fb366e9982c4d2d5513018f4ff4066e42621e0b028bfa1d3cd031340fb9646b9fb70f76a7b86505593d481a78b6e0852aea0149f1bb790e86b6801ac71cb9561c7c9ec66cab3346218d332f89f50a1abfc4ee31da1d16ea1dcfb450136f85a12dd9a42aadf35a4038ad3eb1b4748e27ad51ce16fa16f8645811e782d7dda4f3f49d0662bb6b32ac4d02504e39a11a7aff4a0147b9a1124048d2c45b51621f6fde0b515ae30508c71e25c62bff10741352d9b38bea4bcc8a25698feb6b79224846c14329471afc07291eedf154dc33f8fe801dbc8a10762d0cd2829087684ceed2e69b81c59444d32f304d2bd7ee42304bb53afe55a354655258820448e0ebee90e15df89d09f6a91de11c4a4f294f1c4249fc798a93d6d22eedd77cf104fa7c9fdb5c0aaad3e2baab9057ff8dd8dfc855d22358a7720aada95bff779cb2c90b1d8e9446a165d71b3f5fe9a740302ff3336e20dbce7a7e00a6496f189b61a7e203941a8afd3ad1aa6fd520acd1d28210e18545bca65f52f321365be33bec05a4ccf5b3e58e101c9bf68fb27e237bc101be74347200c5f9e14aeda1aeb89955300dec533091dca3aa183afcc3665aa6e2c824e83bcf057be7debaec6e0a7994645ac609b8912c487ad18c6585217056701b4e1b59ef79b2676affb08ba2bfb0ee69e9b47830cdb34cfa9706de1354a8c563c551ffa6a968da8f8879f1b2e94d05605fba89d9fc713405bdc42065d736441479989129e7a8f22511205837fa763984fd8a9fad4c7b299e89d3905dedf82aa5485d98b5852cce54a99abf6e391693f835e729ab6262cdf250c577fe3858725500500581ed7abb72942d6786996f7fa69958b9071ca8d414a8d9bf0da1cfea45229f1d16f8570e7ba00a2f65353d21c8f1fbec740b65ab316950d3991c72308ecd3fa4a1081fa35177a97a9bddd1dd7d5c3aa01e340c1a6f7e1c2ba3c3b414f4fb1e2e4da7c7c079cc8a0f32ecfbd4bc6d4f962e2a46b3941c6ca0e399a141b628dd04ce8a90a18bb80e3d63c5634b0e22b0d7c52125006abb4eea2cbc39af396b306d1a430efc1fbff2574133c387d0b4203405ae7186ff55b4780226fc9fde14eaa5d5a587969e94a82f9a88207d0558a2e0ac25efd111120374346af374baa2b914b0237987fc201a5bf8a9dcca1041c9222dfa585cffa2d571aeb16a614833343ccd00c7b42574550d58ea26e954b3f9ed0e7896989c8fde7d91d6b5b1c8a312e24cddeed7c1eb24cac4081e6fc6a12c49f0f9b2039ed3a0970845fe92f3eb49a35f7fb90e0730e1ed8663288fbf2313e00a78245f033a1feaaacad0054c9e38091a9c34b364de96b88c4ba6b7a90f851c681f51369699785ce1b4fcdd590229f5f6801e67e9f000a88de83d6d37690e6b15eb2587303e3732b924c621bf4294b19cbe0370ed0b6a078382ec469c8c9bc14abded26361b8358b2e7168cacb9eff03a80954f41ebc4bff1968a5665e8cd7cd11d1f5822041aca9ff0f83ccb21b191595e8d59d1c19ea534e5585c5e6e1aeae16370741e02ff2eafa16e3f90624170cc95d4e8e57893875bfbb6cbc003bc0d383e34cc72ea95bae58e2e3a62ed4422d4b76abba9bde7157808103aaf5242c02ec7078c61947b82b8bc32c4b7243ae2cf1dc707ad39930fd11ed8f6c8da15f405c14cab5fcca7e025dfd57e900f2995ce843496f331a2a5831a49779ea4574025c270495b3e9ea35a5c36ebda482c9b14bf2dcdd7a0c9de911fd6c5ce55ef9e015b2c4fd13ac39ac4ff19cc3a760eaf74348f76fedab8d20f8b02437efae2b3e6a9d872ee0a370eca3897e142babae969117e66f2c12ab544aebbd2f9fb4f1d1a81342a6cad8ca75892d8417f42ec9b0661beab1030427d8f033b075e7cf876b37f5ef71520accb626e9592c88fdc352df05f8f34115a406172283ff4b097471e3d1bd43d99f195ad579b95e0aba891b2bfd5d3611a1a2f43050b349205cdf148c3897cceac311c7f6b7dcadc6867f3e3a84f03ad7bef742b94864205814767dd287ac7a982ab41c03b7f2129fc16e2f4cd757220b5d9ffcb4cc82a3189fc380d641cd125d1ae347c39cc121ab187a41e14993234800962ab79cbfc8d07921d95c7c3cca07838d1248fb1c9b118f84e1dba6a347fb32849feed8fd8f04e571928989392b11ec4629cdf904ee2b703fc501b5c3d5184c3c45971f040f0c7d62308ba4814006b1d0c6a418c15d422f1459e38e81e1a6d55199096000fab8eae02872ce9efe94762fba25525fb49f32e9535b7ef4c037f272f4d4fb5311e635126f21b1696abb7690d2778ffd5f8e4a0d2c7b48d5cbf0158e32c38ae007dad2879afd217f7d77be4ba203c42d75544972650d51d5a3e6d516602d8c8dc39f7534856531d6d06acaa9f159ad317a547f213fcb1105f403c0a063d77074024e6094f21299ae75db570bf8efa862b1776acd1ef781fc58e0de6263c8c747b645d71b56c25a0fac7b002c11f", 0x1000}, {&(0x7f0000001240)="20c7e9623a5cce700633870af0fc867aa4c60cfe0f6a66ca0126934e28d46b1fe719e4259d5d2e87c353c3487de6562ff339f728bfc164b87bf0281d20905cca891d63ebe2368820b5c949af2b41065b6ac4c0f2a1cb87ba59de081a18aa623b86ba3d233616a2e8c9a11a7287a599a3f52ca6143f0d2ade573b8df168e430f7ebd94c", 0x83}], 0x2, 0x7) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(0x0, 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x28, 0x3, 0x0, {0x6, 0x7, 0x0, 'cpuset-'}}, 0x28) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(0x0, 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:15 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="7f454c46015e011f00000000000000000300380009000000a2000000380000008301000003000000d000200001001f00030002000000000023a8074400800000060000000100000053c80e7fcb0000000300000047000000070000002b00000089000000a40600000800000052000000f8ffffff010000005eaaa92c6592e4ed30976813f1771f3666a30a1fe1ba1a409c2e9738ba9d301775488978476865a21fe415ba97fe598960c7c07b8a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d705e859ec28019828ed7db3e011abb707ae46acaf485cf1869213a31f5743"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)) getsockname(r7, 0x0, &(0x7f0000000580)) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(0x0, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000240)=""/168) 14:02:15 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x23) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r2, 0x6) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)={0x12f8, 0xf, 0x7, 0x700, 0x70bd27, 0x25dfdbfe, {0xc, 0x0, 0x5}, [@typed={0x8, 0x3f, @ipv4=@multicast1}, @nested={0x2dc, 0x6d, [@typed={0x14, 0x6a, @ipv6=@rand_addr="0b88af920d5ff64cbefe0573e6ce98d5"}, @generic='}N', @typed={0x8, 0x4d, @ipv4=@loopback}, @generic="b8b19be3afc81e3bf6315cc3cb80", @typed={0xd8, 0xd, @binary="27e49344f008f26c7c0b4a87f44dad804821572f0527385f43756e3d57ae16914e5c08e5a56d590d15473730cdd30ac2ec92f6c383985f194ba5cfe0403b300557b4a8468eb2e224e63aaad496aa61897006f1008043f96b544edda519e49ee96f0da19db8e737dc328e3b2d1cc953e5c91fd34caf6228bab708a07c88b41a78bc61a6dd2367e12623db5420da68d65c0998f06962c27cb2a2d667f97415c4b82dce031736310bc700f24359a0c2f7e6d197f80a476061514e5f5de06392791a4fe64e5508b66ebb46d4255d913a294c2eae6d"}, @typed={0x14, 0x52, @ipv6=@rand_addr="e43aa3b04fd74b028640ef593fecbf08"}, @generic="5bf76ec855cbc6504aa928716955968c4e75c39595bcbae26582700f23e72be5a1e1d7d8270e79efebc57d4dce87afacccb0330b31b7b0f1f2a12b75828a9f892f41bbf8e02a3d3a235d2ad50c5532f25d096aab0b0499252ac8cc42024fe4c4f4de63", @generic="e5dc3546ad7adbfae9956b2e8d4a99ff131da0ce1d1e3e3d90433aa83a4470c8db3d9cf888e5d29db4eb9ec003826b69f15267b347aaa4f9159f1eeef31114f9be7290f2fdcbebdcb4f4985dac2308d41d4ef7ee6e", @generic="0d586a5016fb04ebb6458191b1cd85c62a1668b0c82e8fc96a0c5c35cadf5ba6110d112930f85bee5505938360e20da0ffd460e46c56298d19eb7544c4182ad7c1e49a079e70c756bbdf5aa10474d2f578615b08b7582cc737147e428d53b9d6cc4f7d15b6af9f31cdf762d9e87c1f74724aec36cae360d6a0864fe1123c4bd3fb957a6485c2de3435fef03ce54093c5fb3a547d96c9b092c521e9ec7c65cb3eb2f5bede52f9e016aa48eb441ca069e6e228b5fdd0d0e939a06dd182f42ec3fc52189b9367ed8d0f6d50754fe4ae6c9b4576e8a701475ab7ff0b0a70024ad16594776e361f1dcd1039d293a3e34c0259a15b2d", @typed={0x14, 0x81, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @generic="dc8d58539a95aa105288f22e9227e4624ae49697a59a76c5cad882e6976ae6951150439bbd4cef30790b571b364276e0fb59bceca591683723601ef9fff412608b097c45f9dad81bcc126571ba9a15801c98eb4669ed82a8bb6a09a78b25177710bba8a29f242257348471f674562a899c0235abcee217469079215767d9912cca9311208577abe552b088491e238e3dddfced76d5295732c246eb9576e210ca115de6bb62cb006a8173e8b69af90fca5b533f8895cc840a8cd5f8de62288b334ecfc2b573a81ec9ce9f98a43e0060f1a1c467380c2475b8a39fe27197f1236935450fa00358f180d9e22b216735639a5fe6e69ce71d953a913eff6dde2cdadab5b62f8125883ae30226f1188a74529285facc96e4ddcf534a96f8ba09cfc4ddea2fb7344b903836c94c44ecd7ead29adcbcf43cb15c6bde238b2051daa9d368ddc64599a09a2ac6e44669f2174deb01cf6f95705351442931c8175127ff1ba631ea1eb1707f553370eaf9d31297824d42f0164eb4ac364b882ce0604c7aeaaee97f0fd6aaa342fcb2e6a2ae71534ed5f1e2bee8e16911b283c377de04fe7d304152cee2ef36845fea1a72b3cc8b6052586516bc87b148162131131983925be8b3d873b4fadfb9bad47035ce7fe8786d458a1b96b00823834e917eccd93cf19dd6e1582c344778f34e6d507437b9da10e59b114e52f916cfd3d2c241cbaf21a7b7004fcd7f10d2920b6227380d4bfd5ccee4792cd43e23ce4befb40186dae9a176346767db5bc6775592f1b0ba14da34df34011cc8c2ff6e56e61a5425aa7d757e29be4edd0d8a3daf3b836ff66db10ebc63023768560f061efcbec0a4dbb5c88f28c32f05fd6296b123f6a9790c62658bc781c34be6451f0cf3d0903ef82c939e858cd39ba4dcaf57df4817a2c25ae508a66bb56713da655dd1e0a1a384b3dade6e28b8c3ba84dec5e9343278197e9ac82d9838d072de40caf4c2fed9e402710d0008b6e0a9087c9b9228876fae1bf8ebe883429712254934f5c79da81115430056aaa00d5cee7633d7da9cf06879cf9ac4582d558b7a3b3a3a02c7574783ec6ecb56731953649743bb885d3adb7a7dfbf688e599031a5f6803418a61997e4c2c9099ecd5f307f26ee393f201e6cc8a65dd6d748c50136917370389a2dd7e0f7aefd50574ba43d8508108818a8945dd5c64c6a66b73471c7baea8619bd04767c4ece428c0a339112c10154934f66d3ac35bbea80dd551ad2da9ddff793de94c9542fccc54831d0e6c50e0a87a1093094f93c13d300682003a773122c0762b37ab4e400c4f91dabfacc6c4f8ef8e85834a74de7b0907e3b6a6dc3a5c3294bfb085e7de08b725a54f2ac3c8d4965b324561234ebd6217f590a97bf27401595c0477fbbe2ee5d90ed830d6a439f1f6e60725bf3f8c0a1f0f7239abb6de9b6e98bb2169a74764d9eb6456adedcf52b799dc528588de24616985c956d40cef96c32d556fab82c552beefcf9ed2c172da06c3d748264af5f9765683ecaf6d2ff384a26cbd09a1bc054461d768ac3b427cee63aa8b3d27fe8b8a16ab13c3d430ac30fcddac3145b63e06527ea3e7b6ac982d154b3e19b966e3718401e1119b241e97e46f2ac39903d34da63f1f5a97145371c981975fc48f53f274f586a50652f88611330ee19f4aba43313bbde627907185e79aae86a8625f98f9bc6a8768d3a45714ab0da3e4796c9e95d99c86b36894fa4b7806aa2aeffc45b242fa5406cdc3eed0caedf7e9613fc64c6ff19395365c3f65abe3b02642c03f6ca9107747bda5d1c5754e7702468ffdd45b6ede2ff8190860e8b9a177b94319b55818abc7b45529a6dc5b3b69882dde0418f1de44ba0a8eae16d8b14295eb9bf2e5973c7ad2881d071a81e834a6e46faa2d5e889fd5a8c21f67c4eb5e2c36407e9bd92f0382c6695c2f01ff577a6323cdd13370feafaa292cf36591cb49d09e6e55c02d49502be55aa6e42beeac6ed6df6894d41281f0a9fdc1dc9f50ea163d65de43a8fc759263ebb9569cd37ed22c43f6fd072f8f98d5e276f9b44d1292d7bfe0e41f82f8d7d84ad37fd6464c9c70c509d1b4bc5f41df1a7069b6b1baca1acc3fb79cfff052e08f8d74d3ffae0d0bb20222a3cf1660cd3e638c2b27f0e34001c4a113530c6193ebb3ebf000b81d7fec336d0966d642281b3954ca810a2a45a4b195ca10c3b8ca8d47c7c2599d5f92447920ed4222e69a8bca2b189e807ebd87800a65e09e170f06a9d506971ca3c3cbc989d02d71b98f43c7590ef353b556a856e33d230e6d64e3880e0b4f38179b962b89a881bb1ca2bce1b7e023b8e3e8ec23a53f5f9572d87e9b9ee8561d07bf6d0c2881a02356eebca2cd2f21e723c45acb18020306069215bbca7d5b552f7714cd8b7eeb7964f60e76f77d9b5f08e8d756bad238dbc094b28ea83e6a8b18e55662c89bcc1b25ed2389ec383d2abd2171a61b6cd8dbf6254e453303b98408715aec994fb053621b6127ec386253a0810038a728f5c89c72004c452c76e234147cbfaac8a3c491492e993994535f50163b57bad5dd0b2d57d329dd3843eea9bf1f40384933a4bd034294f2f1b256e311d53ece26ba0510b76579c21579dd47cb2d7913a09c3cdd7cbbe95afb49585b106cdc40d18dd2427e05913e5b5483518ab1163413353d16ce4d9c2986c59251cdf3afd7505cd7e5c37f171c21685197e800dd02e9fa6a2321ee574ce17d41b9faa50548a25428415e093e8b01d50556cdf2b854b8d7acc825f9daa629aa9296ad13edfc8f01b1e2c0250f754ef7ff82d6b90bc6b881e204ec87172073883b2a863b168f11ebf700809408b4dbe5ab009d89067a2eedc884f4e62be484eecfc26d4f9d9495c443b64dd4b7c4c0b7347fe378fe40d7b88d9d7ee8f901923e08baf3f560de2cc07b9ddc1dae7080e0efd015200d0b76341eea47c83ddf8ef30e0875ffd6dd373a85854d91b667f29fbf619514f8e29d3d1bd24f1bf2a4ea055d1d488fce8d67acfdcfc930a6da5bb366d84843d9e6a7a7d0fa5eb7595bc0657fc8f53c47e144d6ee07a416145f822325259546149c19724371708daa30baa1e70e1e690b43e287117a29cbc35ee3fd200585c32ed576130db88426634c7f548a5cff23d6f578c64410abad08e6f661c22d2dd99d967e4a1d549fa2ddef9906dbe76efa5e4a264df4ba838726ff779190fb979363972f3542e6bc226137d6c308705a69a2087e34f45b9aafb1a840d91d47d73ada1c800e2939c4c4cb355f1fc01c573a32d078b278224f0d90386b1e57ee1056bdfbaa47e669c1650ae7adaa9d1142bc3b79e3522b43398cfc419813fb7f636298258e8b9ca0e7747defca45404162cebb21d866d98dd39b601e1acc3a7199083a97302c3e47fe63693a2dbb047c149ffdafc3b2d428ce8794929fae0f3fe736749114e994f24a39080611d80737fad4143b571f83fad6e950bfa998e8b23c987dacdf1e658d351326bfa73c5931716204ff6348558bbd1665bea102a6150e1558e92bb6dc135e48d78eab89b38f21dcb1edf35530e1d3b6befe58ea9ec4e84cfc4844917115a9dad4077cb94b8aa09ddc05ec5876a0effaae620ddb19d56313be5ae02afc1a557456db53d370cb5bc537691e32f1e95fd43a192c5ea296d66200eb525bb765a9672d04c0a748de2926e5cee6a14866fdca1ae5cc59aa3b9b49376967abd6202a6471802f68d569cf01f72eead141e9759f383ea6fec524b9610f92d966035875cd9df35d23872e67fae66657acc91a64acd3e91a1d8c199d21aa74e4e19c1cf00c662385adb7853ebd13accb996ee18300a1fba6d13a9c4bf2b6b27872f2d316c98e3ac506b631410a25e459ddee2ebedcee81730d14a1744b48aba63443b3431672252420cb9b5155f79cc019be812973a75ab2d1ae49d53679ca6036c7a06f7de679a03ff9bd2df38fded0560c9be16c38b8059dbed04ece725218f911fbc752472db7983819f93a093620253ba8c85d5a4c3d15009da5f85bb5b43c86908b3dc3d4200846109034ad273946163beccf67a49551a2e0718dbe1504288704885e02f0a8d4ca05a43d52b59e5b0671cfdc0db15a4db0aca3a91d773d130b05ad41d4985d671b1c5eeb3288455188536506060812b412978424f691ae3e168b7f6e938194b82eced6d89a8ec61025d6a9ed4dff36812d1ae7d7e3a137673a565501ef6b40e6129c6b06138e185200c56e77e7a807ff7850397ba256109724ec9128161b3d778a284172fb0b5e7b5c123bd8a811d4335fb3d1c5e70b86540b08bb3179b932b908a91eea71d1eae4319d89bf3d901289f13555aba06efd36e442af072cdff45ece303353ced69b6e85ce112c11e92f5dad462f522434ecfd3899f09fec06d5f0a4227956e54e0be41d59474a3c1cbebfcc2e5d8d7df2b9aa5cbf15c1d7e45de0db427d4e92aa6e7ac977ff37c10fccc2aa2e19629732df9a755ce525b86085ca180b71db133ca92efc6adae85b01f7fffdf17f5fd684e3fdb632ba930ac7af5a923cbe6af3dc33f6a413559a545fdb3ef4ca180d42013a9d30503a1a6d7c680ceafc1cde05cd737951b0f58d3f966a060acbfe7a99edf51baa75920b6b45cc8e2ddf4a20e2fa02dab2899865113139c9912749ece6e0edfb984d1ea2fc2ebf8cb89e71e572b2a5f5358f095c2d208a6d56539cd49dea44dcb7486717f90297c8ba33407a8ff94cec64a21e9d899fed0800437b7bff750adf22c9e584523609faf9ff9c26eee44eaa7f610c98f99ed884397a58f3214685d2858cd72ec4dc5cb87cfa22ec6c4d48c6463e2b4e79dc821cb12a11f0a1aba47f7591c9476478a804dca4682299b7581a423eb94071f5768567bd03cd90c8782fbf88a89ebc7c093d108e262c860fcaf939a30222379f18513b04c97c7ff705bbfb2d72578afd33a64499076ac2e15c410e002d47ccc7ca18b98da63a5543e07e7ffff1c9269dfd862369b63003df3f7d6f0f7b99147dfade25b20341b29138186532f72ce7a6ea67976700e37aadf013d1413b6ba132afeca79f755487a91ae04b8b90f8c86d079c09c25aaf63b53c44a226bf4fc000020f18f4aee2d0a09170d9f6ca35b9c616773141b577875df167f15ea28e96266969aecac5833275395ab33a9385512c58e02d5765cac50b2bb7700e4b14bfd6654dedd1a5c25b69842c08f545572e6e3b514ce47edfc73c1a2a4d87bddb3094d6554a0bf68c5686b490b333dda64747e51ba8e114e91c9cad958907d3e4ba7b3bd66c6e1ba41e40ba27b84e64d9069580f494b9535c27ee72cf32fb64346757c0ded45dfc9f9da27bd29df425e5a85192e2232b69b976ff71dde959e74cca1d9dfb78a2c88db4e6ddf5af29a38660c4d88d1ae31cf71ee688dc2cbacc4c8bc2e4de31b07543e5b44b21630b5ba8e80a3f99e8c37e7b21fa226b904019cf8f32741267073df49d59d1e6ba35322a948d8e2fef631591dcd37a43f9715cdc67f28fa89f7a2d9c57755989b510009ebc55b322071fb03736d76a6fe9bc97c0a6dc99af33c92c02b409e7e3ffd7264516569e20812e4b35bca756e8ce2793cff71b763b94c7607d54d21b3df3330b10113a8fcf55e731e571a53134f2c0cbd7451fcc1f9500d5352fa26e3222603597c01633b7d08f5a88f266060065e49ddeb688b1321ea5a9f408cc6de760fc42c9ac0f5b9c823d7f9556f5bdbe10573497db1ed7f9a026f9fa81ee2e316691f7a3c9d45bad8a9ece4f9c7fe01699b14bdb"]}, 0x12f8}, 0x1, 0x0, 0x0, 0x44090}, 0x4000000) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26080, 0x38) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r3, 0x0, 0xfffffffffffffffc) sendfile(r1, r3, &(0x7f00000000c0), 0x8000fffffffe) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000003c0)=[0x7]) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f00000000c0), 0x8000fffffffe) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000180)={0x89aa, 0x2, 0xd4f1, 0x7}) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r6) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=0xfffffffc) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(0x0, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(0x0, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:15 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:16 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:16 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:16 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xf14f, 0x4) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x6) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) write$selinux_user(r1, &(0x7f0000000040)={'system_u:object_r:xen_device_t:s0', 0x20, 'root\x00'}, 0x27) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop3\x00', 0x0, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)={'md5sum-'}, 0x8, 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) 14:02:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) io_setup(0x7ff7, &(0x7f00000000c0)=0x0) io_setup(0x8000, &(0x7f0000000500)) io_setup(0x0, &(0x7f0000000540)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = dup2(0xffffffffffffffff, r6) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)) getsockname(r7, 0x0, &(0x7f0000000580)) linkat(r7, &(0x7f0000000400)='./file0\x00', r5, &(0x7f00000006c0)='./file0\x00', 0x1400) io_submit(r4, 0x357, &(0x7f00000007c0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x7fff, 0xffffffffffffffff, &(0x7f0000000580)="4dec8e28f15ab342d900fe5927683db09cdaebfbd78e6271e1ca7ee611f65f9315733c4fc499cd2431be2b84a4312ecafc75fbcd738ccbc6aa5209408093f00d429a1df7033c401374be3c956fbdeebcfbd2c44c4c21d30e11d17fdcda2288abb3c3a05002d17afaf4b8da7718d304153e98ecead06a3295162c970c845c9235168f5ac28bac8f89522f561bedb023eb7ba700", 0x0, 0xe6, 0x0, 0x5546e793cf22fa77, r5}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000000700)="41b855aeff3d818ea7ece74ba7683ab6450922176ab418234cc8b23f718bf983246a7055e69010e136340981ee41211b369fc2aca479eb4565ad070682ce847bb02b9222003d94d8d2edb70097d22c0db8bd719f8b3d1f26c28e14ab4eb611e15c24279e804aec8a40d1d91c566b164ac3aa55db5023bf54aebdd33032ed683ddaed631345727a12ba4cdda1bf7efef9e9cc7a198b78312944cc83b38a4f89b3bfed", 0x0, 0x3}]) r8 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r8, 0x4, 0x6100) ioctl$EVIOCSREP(r8, 0x40084503, &(0x7f00000003c0)=[0x7]) r9 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r8, 0x20000010000, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f00000000c0), 0x8000fffffffe) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r10, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) io_submit(r3, 0x4, &(0x7f00000004c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x8000, r9, &(0x7f0000000000)="000e5d045d982d02f116451775537ea6f04ccb337aee3d20ee8995a5f765c93ffe8832b643539e478d5c979c416276267e0f6721629360ff5fb64532f9dfe2fa02b26842cb6e4b183ef552c026c71d9b8516b0c7bbbfc2c5c1037d8f892dfa63c76d09944bb4ad9a0e005df1f7d5b37416", 0x71, 0xe743}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)="9c486b595ac36f40c7f45eb60f212bab89501a808ccb31360dafc8e4862c75a95aeed47cac47efd68f2dd78298204d714764c302427097a78787f09d6764de03165a408673840d4263bdb0f29738758e9007fabe42651ded6cb732038f69421f89868e82cd73c64073abe3bca37c53a46dfc453fc5f02178c6f0d131acf2eef878aea183ea3697597407b47cf441de15c89a26cdb65cb425bf22", 0x9a, 0x0, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5d1e4a7d1ba7ca68, 0x8, r10, &(0x7f0000000300)="dbd3e9afa19b801a876569de9851f91832c6ea21bce992515285f58481230938b21dc32178", 0x25, 0x0, 0x0, 0x3, r11}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000400)="8de09bb43d1f8dfae8c48ebcf31ffa3901dfde46ed397f3cbf8520277ba1586f949e1fc0718d5a8eedbfb7cc2d0129bf197f8509ecfa4aa82066d49945f01bc1bc5f5043873545170835a7f94a446d29555e24d794a3c82c1e0ea1841c7754b746e76266ca", 0x65, 0x1, 0x0, 0x6}]) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 14:02:16 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x200, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) r6 = dup2(0xffffffffffffffff, r5) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0x9) socket$inet(0x2, 0x5, 0x36) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:16 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:16 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x210000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:16 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:16 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x80) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d58d0ea843641874554d245218a8eafafb55c85b85dc700000000000000003608e6", "bf33830aba734fe70b01010000e51ecd0925b048dd02b6b6f14c8cd400", [0x401, 0x745]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) fgetxattr(r1, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f0000000240)=""/199, 0xc7) [ 456.170085] blk_update_request: 1417 callbacks suppressed [ 456.170092] blk_update_request: I/O error, dev loop6, sector 0 [ 456.181711] buffer_io_error: 1417 callbacks suppressed [ 456.181719] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 456.194714] blk_update_request: I/O error, dev loop6, sector 8 [ 456.200697] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 456.208364] blk_update_request: I/O error, dev loop6, sector 16 [ 456.214434] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 456.222086] blk_update_request: I/O error, dev loop6, sector 24 [ 456.228151] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 456.235781] blk_update_request: I/O error, dev loop6, sector 32 [ 456.241855] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 456.249513] blk_update_request: I/O error, dev loop6, sector 40 [ 456.255579] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 456.263253] blk_update_request: I/O error, dev loop6, sector 48 [ 456.269321] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 456.276980] blk_update_request: I/O error, dev loop6, sector 56 [ 456.283048] Buffer I/O error on dev loop6, logical block 7, lost async page write [ 456.290711] blk_update_request: I/O error, dev loop6, sector 64 [ 456.296786] Buffer I/O error on dev loop6, logical block 8, lost async page write [ 456.304445] blk_update_request: I/O error, dev loop6, sector 72 [ 456.310524] Buffer I/O error on dev loop6, logical block 9, lost async page write 14:02:17 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) dup2(0xffffffffffffffff, r6) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:17 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0e05403, &(0x7f0000000240)={{0x2, 0x3, 0xffff25b9, 0x3, 0x6}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x5, 0x4, 0x8001}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:17 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x80000, 0xb, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd83cf117b81061ec3f3f3e3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x1]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)={0x9, {{0xa, 0x4e22, 0x3, @mcast2, 0x10000}}, 0x0, 0x3, [{{0xa, 0x4e22, 0xfffff45c, @loopback, 0x3}}, {{0xa, 0x4e22, 0x1, @rand_addr="1805f9e4dafece778fc19bae741908b4", 0x1}}, {{0xa, 0x4e24, 0x5, @remote, 0xff}}]}, 0x20c) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@mcast2}, &(0x7f0000000080)=0x14) 14:02:17 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) socketpair(0xa, 0x1, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="d04b8900bd5db055ebc4f4a3f559d73d72483fb97f48fc70be4c5ee4c0c6b68c6f487cef604002b966eb44af2f0f8743479a4eacb2944bb80c639700ff0bddb9e322b2733a1dc563fbfcccc71e0d68329897540d16d29ea274865e23daa2942f7647125fecf11f8282bc8ec8606988c2024367"], 0x3}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 14:02:17 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:17 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:17 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:17 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:18 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="7f454c46015e011f00000000000000000300380009000000a2000000380000008301000003000000d000200001001f00030002000000000023a8074400800000060000000100000053c80e7fcb0000000300000047000000070000002b00000089000000a40600000800000052000000f8ffffff010000005eaaa92c6592e4ed30976813f1771f3666a30a1fe1ba1a409c2e9738ba9d301775488978476865a21fe415ba97fe598960c7c07b8a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d705e859ec28019828ed7db3e011abb707ae46acaf485cf1869213a31f5743"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) mkdir(&(0x7f0000001380)='./file0\x00', 0x8) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400001, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(0xffffffffffffffff, r3) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)) getsockname(r4, 0x0, &(0x7f0000000580)) linkat(r4, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x3, 0x3, 0x8, 0x1, 0xfffffff7}) 14:02:18 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0xead]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) r6 = getuid() lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r7]) write$FUSE_ENTRY(r5, &(0x7f0000000240)={0x90, 0x0, 0x6, {0x1, 0x1, 0x4, 0x6, 0xfffff565, 0x2, {0x1, 0x1000, 0x148000000, 0x100, 0x700, 0x9, 0x4, 0x5, 0xfffffffc, 0x5, 0x7, r6, r7, 0x20, 0x5}}}, 0x90) 14:02:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x12080, 0x0) sendfile(r0, r3, &(0x7f0000000080)=0x10000, 0x5) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r4 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)) getsockname(r4, 0x0, &(0x7f0000000580)) linkat(r4, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='GPLtrusted*.\x00') ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:18 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:18 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:18 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:18 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:18 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:18 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r2, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:18 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x0) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:19 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r2, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:19 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x0) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x6, 0x10040) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x4, 0x0, 0x1}) 14:02:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(0xffffffffffffffff, r3) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)) getsockname(r4, 0x0, &(0x7f0000000580)) linkat(r4, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'veth1\x00', 0x200}) write$P9_RSTAT(r2, &(0x7f0000000180)={0x51, 0x7d, 0x1, {0x0, 0x4a, 0x400, 0x7, {0x9f, 0x2, 0x5}, 0xc0000, 0x80000000, 0x3, 0x62, 0x1, '-', 0x6, 'veth1\x00', 0xa, '/dev/ptmx\x00', 0x6, 'veth1\x00'}}, 0x51) 14:02:19 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="7f454c46015e011f00000000000000000300380009000000a2000000380000008301000003000000d000200001001f00030002000000000023a8074400800000060000000100000053c80e7fcb0000000300000047000000070000002b00000089000000a40600000800000052000000f8ffffff010000005eaaa92c6592e4ed30976813f1771f3666a30a1fe1ba1a409c2e9738ba9d301775488978476865a21fe415ba97fe598960c7c07b8a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d705e859ec28019828ed7db3e011abb707ae46acaf485cf1869213a31f5743"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) fcntl$dupfd(r6, 0x0, r6) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:19 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r2, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 14:02:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xc7d9, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) write$P9_RLINK(r1, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) 14:02:19 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(0x0, 0x0, 0x0) 14:02:19 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x0) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:19 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:19 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{r1, r2/1000+30000}, {0x0, 0x2710}}, &(0x7f0000000080)) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:19 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(0x0, 0x0, 0x0) 14:02:19 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(0x0, 0x0, 0x0) 14:02:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:20 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:20 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r1 = memfd_create(0x0, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_dev$loop(0x0, 0x0, 0x0) 14:02:20 executing program 5: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r3, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) lseek(r3, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = dup2(0xffffffffffffffff, r5) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r4, &(0x7f00000006c0)='./file0\x00', 0x1400) sendfile(r4, r1, &(0x7f0000000080)=0xfffffffc, 0x8000fffffffe) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xad3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst]}, &(0x7f0000003ff6)='OIL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x36) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000042d27fd59d34a6ce0000000000000000000000000000000000000000000000005e000000000000002000000000000000000000000000000000000000000000000000000000000000497d50b0d94ff3e13b2fadaac82fb280474ea5a7d92c423ccc814020b3702bd4fa390029ebb77e81a70c8335210bc077159584223b232f66a84f31a13aa6ab3013b8bf6d38321c26b986a489a66b8459c21bb07b0b2f0b9e507c4fa0b127"]) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r4, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000080)={0x61f7d2c62ea97198, 0x3}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) munmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000) 14:02:20 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:20 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:iptables_exec_t:s0\x00', 0x25) ioctl$KDSETMODE(r2, 0x4b3a, 0x8) 14:02:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:20 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:20 executing program 3: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:20 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x40040) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:20 executing program 2: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/133, 0x85}, {&(0x7f0000000380)=""/35, 0x23}, {&(0x7f0000000600)=""/63, 0x3f}], 0x9, 0xfffffc00) write$P9_RLOCK(r2, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f90b2e1a9dfd093c01a411781515f95c73aea5b54a0e25293c684abc04727120d7d04ec16c42e53f822e886f1ef9319626b8a8338cd0bc8a7cfc16a39afb2039a0994240b2424518be3932c44ce75615b39d3117e2645171cb9c792719863e5d62a72c566735e6ed9306d2c0024aaacc7027ea056faa6aeff08f5641a850dbd93e5eaf08a60971f8fb756e67db4fb69c9c5fdc17d787ca94968a0eb0e0129e62424285cd48c6f5a6aec41eaea5c3d93c50cc") 14:02:20 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:20 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:20 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r2, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000080)={0x15, 0x1000, &(0x7f0000000240)="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"}) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xad3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst]}, &(0x7f0000003ff6)='OIL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x36) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000042d27fd59d34a6ce0000000000000000000000000000000000000000000000005e000000000000002000000000000000000000000000000000000000000000000000000000000000497d50b0d94ff3e13b2fadaac82fb280474ea5a7d92c423ccc814020b3702bd4fa390029ebb77e81a70c8335210bc077159584223b232f66a84f31a13aa6ab3013b8bf6d38321c26b986a489a66b8459c21bb07b0b2f0b9e507c4fa0b127"]) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r4, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000080)={0x61f7d2c62ea97198, 0x3}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) munmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000) 14:02:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(0xffffffffffffffff, r3) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') ptrace$setopts(0x4206, r5, 0x60, 0x3) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)) getsockname(r4, 0x0, &(0x7f0000000580)) linkat(r4, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) write$selinux_context(r2, &(0x7f0000000080)='system_u:object_r:mouse_device_t:s0\x00', 0x24) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r7, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000180)=0x7) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000040)={@local, @loopback, r8}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 14:02:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000000240)="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", 0xfc, r1}, 0x68) fchdir(r1) write(r1, &(0x7f0000000000)="7fef3fd16ed4ef1c79a82cb8f0d2de19dcb29187726ea9dd57b152f1e2b57cb2c9c59bbef82b3b0064ddcbd172a748283753d556db", 0x35) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:21 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) [ 460.292235] audit: type=1400 audit(1574431341.047:51): avc: denied { create } for pid=2272 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=netlink_netfilter_socket permissive=1 14:02:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd94eaf91c761167c58aea5ab6f14c8cd4", [0x401, 0x749]}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 14:02:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r3]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x22, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 14:02:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:21 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:21 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:21 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000240)='@H\xbb\xfd\xdc\x01\x99\x03\xc0T\xdd\xf3\xcc\x1b\x05d\xe8AUT\x18\xf5\xd4B\xe5\x93M\xc1\xd7\f\xa9@~\xcaQ\xc0\xeb\x17{\xcd\xe74\xa4\xb2Y5\xc6F\x1cVDV$\xab\xc3\x17\x95\x88\x84\xefN\x8f\xc0\xe2\x9b\x9f\x1d-\x0f\xd9\x9a!\xb8\xb2c\xd5\xd6\xb7\x8a\x04\x97\xe6\xa0\xe0\xde\xe7\xa6\x13Zy=R\x8a\x03\xd7\xca\x9e\x8a\xc4(\x13\xf3\xacx\r\n\xe9\xd9\xb7\x03\t\xf6x]\x18\a\x90\x87\xd9s\x87\xb5\xf1\xd2\xd5\xaf\xa2\xc2\x1a\x8f\xf0\"\xa5x\x8f\x03\x1e\x9e\x12\xad\x8d\xde(Rq\xce+\xd6*\x05\r\xb0T\xe3\xd0\x14\x00\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxneC0(\x00', r1) keyctl$reject(0x13, 0x0, 0x9, 0x748, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r2, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffdfc) 14:02:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r3, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x18da, {0x0, 0x4, 0x4}, 0x100, r3, r4, 0x2, 0xfffffffffffffff8, 0x10000, 0x1, 0x8, 0x7, 0x100, 0x3, 0x2, 0xecc, 0xf7, 0x4, 0x80000001, 0x8, 0x489}}, 0xa0) 14:02:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev?vga_arbitur\x00', 0x44200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0xc0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x401, 0x8, 0x3, 0x1, 0x1000, 0x7fff}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/2}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000280)) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x5) 14:02:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:21 executing program 1: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:21 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x3f, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x28040, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000cc0)={r3, @local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) connect$packet(r1, &(0x7f0000000040)={0x11, 0x1b, r3, 0x1, 0x20, 0x6, @dev={[], 0x20}}, 0x14) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x18, 0x16, "d3484e71da2b27affe84bea27b81b90d5838ea8436000000000080065608e60000000000002300000000b300000000000000000000000000000000e900", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x6, 0x748]}) [ 461.182354] blk_update_request: 2324 callbacks suppressed [ 461.182359] blk_update_request: I/O error, dev loop6, sector 0 [ 461.193992] buffer_io_error: 2324 callbacks suppressed [ 461.193999] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 461.206971] blk_update_request: I/O error, dev loop6, sector 4 [ 461.212949] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 461.220631] blk_update_request: I/O error, dev loop6, sector 8 [ 461.226630] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 461.234279] blk_update_request: I/O error, dev loop6, sector 12 [ 461.240359] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 461.248044] blk_update_request: I/O error, dev loop6, sector 16 [ 461.254097] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 461.261759] blk_update_request: I/O error, dev loop6, sector 20 [ 461.267829] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 461.275472] blk_update_request: I/O error, dev loop6, sector 24 [ 461.281561] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 461.289238] blk_update_request: I/O error, dev loop6, sector 28 [ 461.295286] Buffer I/O error on dev loop6, logical block 7, lost async page write [ 461.302958] blk_update_request: I/O error, dev loop6, sector 32 [ 461.309050] Buffer I/O error on dev loop6, logical block 8, lost async page write [ 461.316720] blk_update_request: I/O error, dev loop6, sector 36 [ 461.322794] Buffer I/O error on dev loop6, logical block 9, lost async page write 14:02:22 executing program 2: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8, 0x11, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdbd0d5838ea843641874554d245218a8eabafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741e3f07798aea5ab6f14c8cd400"}) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/233, 0xe9) 14:02:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1, 0x101000) ftruncate(r0, 0x9) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x101) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000180)) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r2, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000003c0)=[0x7]) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f00000000c0), 0x8000fffffffe) ioctl$KDSETMODE(r4, 0x4b3a, 0xd1) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000240)) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x800}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r6 = socket(0x3, 0x80000, 0x8) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) fcntl$setown(r7, 0x8, 0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000300)=0x50) 14:02:22 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:22 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001640)={&(0x7f0000001400)={0x208, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:22 executing program 5: getuid() r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:22 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000180)={{0x5a, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 'sed\x00', 0x20, 0x1b, 0x70}, {@empty, 0x4e23, 0x2, 0xffffffff, 0x922f, 0x8}}, 0x44) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syncfs(r0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x4) 14:02:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1a6e3c57dd0a8148, 0x11, 0x8, "4e71da2b27afff84bea27b8194b5d713fa42c600000200000000bdb90d82b55c85b85dc721f14bb5d321e600000ce600", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x3, 0x3]}) 14:02:22 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:22 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc2f0a0688717c047, 0xfffffffc, 0x4, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0d983aabaf37206f3e7f3741ecd5dec3bd791450f798aaa5ab600", [0x401, 0x749]}) 14:02:22 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x17, 0x8, "d3484e75da2b27affe84bea27b8194b5d6d024e536f4d1b7c8fa8d0abdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x4, 0x1c5edec9, 0xae7a, 0x17, "24500e5aaeb8fecdb8ddbe188525249c7dac4f", 0x200, 0xeca}) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1', "48dafbc3d7a3cd14c98882c9faeabc493835b04da0a55b5532c1fd030913436b45d2a7f310eab9f6c525d4e207f625b725136119ca69a3128285ae9c2154544f58a809adb0ec31458974f2f6f0a0859225be885a29cf336c21f4528d8e8bd9b04aef77645e134158a820ae5a4ff3752e09e33f79b5b83aad47d171726c3d534ebb5002f6ee8f52983b733b32a3dbb20d3c14e242bd1c942cad2d7b96aa8228c0e3762984e2613cc44288faf17eb6ac1e7dcd7e2869ed33faff3924b89c172af79ea86c534d2455d4bd78323db40b26da79f8c5eb6c6557d37eee55e711b92dc8a778e517687fcf34e01bad32a8700fca119b238e392b"}, 0xfa) 14:02:22 executing program 3: rt_sigsuspend(&(0x7f0000000000)={0xdd39}, 0x8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) 14:02:22 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000000)) 14:02:23 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:23 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(0xffffffffffffffff, r1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)) getsockname(r2, 0x0, &(0x7f0000000580)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r3, 0x6) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0x80) sendfile(r5, r4, &(0x7f0000000180)=0x9, 0x40) sendfile(r3, r1, &(0x7f0000000040)=0x8000, 0x4) linkat(r2, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1400) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:23 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:23 executing program 5: pipe(&(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000cc0)={r1, @local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x1, 0x9, 0x80000000, 0x200, 0x1, 0x100, [], r1, 0xffffffffffffffff, 0x3, 0x1}, 0x3c) fchdir(r2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x10402, 0x0) sendfile(r3, r0, &(0x7f0000000180)=0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) sched_rr_get_interval(r4, 0x0) syz_open_procfs(r4, &(0x7f0000000040)='net/sockstat\x00') r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x100, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x64) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 14:02:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:23 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:24 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) sched_rr_get_interval(r1, 0x0) sched_getparam(r1, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:24 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) fchmod(r2, 0x180) 14:02:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0xc00) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000240)="ead81e7c4ae6b979c9c4b574ad7bff758fdaea349759bbbc5d45cd99cf44b47fbdf6448eac01aa4c2d434b484cac363c32bd8a53410cab580e8550e534995fd3e69058765f57e14e0ef5cea87fe10abe620f45bc805ceb58cd290bbcb07d30845be0f6ab27895f96b6a3baedd198e38f6fc2675481d31ac841c09abd9c8887921ad9d300609ebef74bde27d6201e5c0cd91490aee827318d949fb0b5157458850231d3074bdee1342c02b710050a72d840f021de5d58d4e110572c019c850dfbc6475bc1f2f7f600c3fc50830b4a7af699c11939445d3109670f338b565a11f5fdadbfb884", 0xe5}, {&(0x7f0000000340)="4be7ee108da1d85231b62b38cd0ed1f86283f5f4fb9bd1e4cbfc7c8a34bb68b9083d43b4eacde4adc72d57544989657571a34174e4bcb444edc5a70a9449f883f56bf158abcedb66e0b2adf60e829ab858961595720ab6fece9f9e97f5175d70a1181498362a06cbeaf12efb02a606a9d9a02a6a02ff3876afd8d2822b6bb0e97937f01a877596a8012caea5fe85608c04c44b833e295541c38af2902aa127760895f72d9662fb9bdc3c9bbd0f73e888e336c6aa8da1044a081c943ac9b622c5ca5327e7fb", 0xc5}, {&(0x7f0000000000)="0a94e77852040994f021668d7dced7717d97e528fbb6c41043d937d63fb0d88e", 0x20}, {&(0x7f0000000440)="657dd5b36632e7ba239f7b8b321c388403d2b311739972b0d8c71e1e205c29c996ce182243a16baa84a11c801f1e6fa68084b9da3b0cba17aa47efeb0d3831f57735286fb2af9e4be31885822225a206cff66eca633760ba90163433ff9c3a35c6d528b8e46390105be3671455173c4c88a27aa54be4b7acfd60fce81d996ee1b1607990f9f015c54b636310f1a4086d78e1bc20cf6d8f14d7e60274c7519a", 0x9f}], 0x4) 14:02:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:25 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:25 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x28ce17367135cbea, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x18c, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2a}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xb}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @broadcast}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4a}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4884) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:25 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(0xffffffffffffffff, r1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)) getsockname(r2, 0x0, &(0x7f0000000580)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r3, 0x6) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0x80) sendfile(r5, r4, &(0x7f0000000180)=0x9, 0x40) sendfile(r3, r1, &(0x7f0000000040)=0x8000, 0x4) linkat(r2, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1400) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in6=@remote}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) 14:02:25 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x7f2fa0b2908b788d) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = geteuid() r2 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r4, 0x0) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f0000000440)) fchown(0xffffffffffffffff, r5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r7]) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r8]) getgroups(0x3, &(0x7f00000001c0)=[0xffffffffffffffff, r7, r8]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x2}, [{0x2, 0x2, r1}, {0x2, 0x4, r2}, {0x2, 0x1, r3}, {0x2, 0x6, r4}, {0x2, 0x1, r5}, {0x2, 0x1, r6}], {0x4, 0x6}, [{0x8, 0x4, r9}], {0x10, 0x5}, {0x20, 0x7}}, 0x5c, 0x0) 14:02:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0xf4851e3165e040f0) write$P9_RCLUNK(r1, &(0x7f00000003c0)={0x7, 0x79, 0x1}, 0x7) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x9, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000180)={0x2, 0xa, 0x102}, &(0x7f00000001c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x80000000}}, 0x10) 14:02:25 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:25 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r0, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) select(0x0, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x200, 0x528e}, &(0x7f0000001880)={0x80, 0x8, 0x7, 0x0, 0x3, 0x0, 0x2e}, &(0x7f00000018c0)={0x0, 0x0}) sendmsg(r1, &(0x7f0000007300)={&(0x7f0000005f00)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000006000)=[{0x0}], 0x1, &(0x7f0000001b00)=ANY=[@ANYBLOB="4000000000c4bb3023ae55b5fb0bbdbb061874c97da636cfea2518483206af419bc0000000b700000071bbcd857934432875b21c305b1b999122af5b5ecdd8417f9910908d81000296914ace4561a4ae23d7223fcd504dbd"], 0x58}, 0x4000000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000001e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc000408}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="55001d0f87e6ab9d39eb9c70411abed3775ba65f237e42b706730b29833f36be48145d3d74adf655c6c930b9e65327197c2a5397aac03be5fb9903c28d943b2126e9d447d166565a5804b4", @ANYRES16=r3, @ANYRESOCT=r2], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x80, r3, 0xda73851ea21a4235, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x80}, 0x1, 0x0, 0x0, 0x406c004}, 0x8000) 14:02:25 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c8520e6063608e600", "d0dd830aba7372f7470a1e98061dcd0000000000000000008aea5ab6f14c8cd4", [0xfff, 0x749]}) 14:02:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x2106) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x165) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040)=0x20, 0x4) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(0xffffffffffffffff, r3) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)) getsockname(r4, 0x0, &(0x7f0000000580)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r6, 0x4, 0x6100) ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f00000003c0)=[0x7]) r7 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r6, 0x20000010000, 0x2) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) sendfile(r6, r7, &(0x7f00000000c0), 0x8000fffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) fcntl$lock(r5, 0x6, &(0x7f0000000540)={0x2, 0xd6ee2ea3d55f9291, 0x10001, 0x1, r8}) fchdir(r5) write$binfmt_misc(r5, &(0x7f00000005c0)={'syz0', "c4396f6bae4aae9eeb0a0d77c943267835dbcdb65bbcf80494edef4aaee436ef223b623ed16f440331cbd3653c11a0d49a1976f7433ee765c3fb69799bc184f114e520a175f9732e8819663b8235149227b4ef7e8b1b7dbd7a963e11eecd887cd3f4163dbf0a97b0cb101700910d186f1efaa1abf52047209cabe7c1e5d62e1ca59c9251390d8c1c47aa2f632593707e45ba9caf0aa2f5a201c1075fc188805fe8e2b92b611f507cd9"}, 0xad) linkat(r4, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x258, r9, 0xb18, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb450}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7f, @remote, 0x23}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x40000}, 0x20) 14:02:25 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="7f454c46015e011f00000000000000000300380009000000a2000000380000008301000003000000d000200001001f00030002000000000023a8074400800000060000000100000053c80e7fcb0000000300000047000000070000002b00000089000000a40600000800000052000000f8ffffff010000005eaaa92c6592e4ed30976813f1771f3666a30a1fe1ba1a409c2e9738ba9d301775488978476865a21fe415ba97fe598960c7c07b8a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d705e859ec28019828ed7db3e011abb707ae46acaf485cf1869213a31f5743"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) dup2(0xffffffffffffffff, r4) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:25 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:25 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x28ce17367135cbea, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x18c, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2a}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xb}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @broadcast}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4a}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4884) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000000)=""/46, 0x152) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_get$pid(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = dup2(0xffffffffffffffff, r5) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r4, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'bcsh0\x00', {0x2, 0x4e21, @loopback}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) set_tid_address(&(0x7f00000001c0)) 14:02:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)={0xf68, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xf}, 0x9}}, 0x0, 0x3, [{{0xa, 0x4e24, 0xab, @loopback, 0x7fffffff}}, {{0xa, 0x4e21, 0x0, @rand_addr="86212fab6faf271c52f468244bbedc62"}}, {{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x29}, 0x1000}}]}, 0x20c) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000480)="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") ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) fadvise64(r3, 0xdade, 0x5, 0x4) 14:02:25 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = dup2(0xffffffffffffffff, r2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)) getsockname(r3, 0x0, &(0x7f0000000580)) linkat(r3, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000000)=""/83) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:26 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x39, 0x2000) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000040)="856f16252c5a927eaaa875ed0223984ded45267bef7a1f336c3292f4bb295065a597343a6426960b0a0dacd0c0b13b5876dc508844dc4d452f689824fa3c45a245d5fbd1d9572ec7a0e931826409c276f947d15e675cd74a4c3c8a597d6282d1647e7e9c6fb58c5e079d73c12c69142f", &(0x7f0000000240)="1abc43d2882447701d51a0aa14e1e3adf709b580032dbc0fa6a716488b520ad8815b80a0b07b9da3026307b877bc71a7c7b7be4b3a692576c4b7563a069bd64cd2cd144cdf73eb6dc7035bcdfb10c1eb96caec71769e08c04a9bf3e716558a7cc9efee910e778d6674220c410d8773778385c02f60081b495e99f136f7e8404fce39e3ab55357e29bb433c03fbaab024ad6b296647490a8a1274580e3c6a0c345c22bdaaba305eb6195973926cb6100d50e21c3fd1094dc12935e62ae3", 0x5}, 0x20) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:26 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:26 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2040, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) fcntl$setlease(r1, 0x400, 0x1) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)=""/69, &(0x7f0000000180)=0x45) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) 14:02:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x10c, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x10c}}, 0x8468) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="402c08e35ff560937564a2ecb42d3e7a6594986f82f6a144201e2948510215f7cb6a9749c473991615a9fcaabd53f22977249a988b55a01aa8d18a090ee778eaf408a12f27b39d7df86fe56bc1cec8358e317169390ed0c41d4ca2ab92335d223aa292c640055d7c253e2d0d1510f09024e16eaa950e67df08a68be5dde68f4c803322b58e4177dd34398bcba0addc3b3edcc5cd5d3f3ab875ba9c9419a66f3dfb0ae24f3274542c7d25ddd679", 0xad}], 0x1, 0x5) 14:02:26 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) [ 466.193663] blk_update_request: 3098 callbacks suppressed [ 466.193670] blk_update_request: I/O error, dev loop6, sector 0 [ 466.205323] buffer_io_error: 3098 callbacks suppressed [ 466.205331] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 466.218274] blk_update_request: I/O error, dev loop6, sector 4 [ 466.224242] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 466.231932] blk_update_request: I/O error, dev loop6, sector 8 [ 466.237939] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 466.245584] blk_update_request: I/O error, dev loop6, sector 12 [ 466.251679] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 466.259349] blk_update_request: I/O error, dev loop6, sector 16 [ 466.265403] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 466.273062] blk_update_request: I/O error, dev loop6, sector 20 [ 466.279154] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 466.286826] blk_update_request: I/O error, dev loop6, sector 24 [ 466.292883] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 466.300540] blk_update_request: I/O error, dev loop6, sector 28 [ 466.306626] Buffer I/O error on dev loop6, logical block 7, lost async page write [ 466.314279] blk_update_request: I/O error, dev loop6, sector 32 [ 466.320451] Buffer I/O error on dev loop6, logical block 8, lost async page write [ 466.328112] blk_update_request: I/O error, dev loop6, sector 36 [ 466.334180] Buffer I/O error on dev loop6, logical block 9, lost async page write 14:02:27 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="7f454c46015e011f00000000000000000300380009000000a2000000380000008301000003000000d000200001001f00030002000000000023a8074400800000060000000100000053c80e7fcb0000000300000047000000070000002b00000089000000a40600000800000052000000f8ffffff010000005eaaa92c6592e4ed30976813f1771f3666a30a1fe1ba1a409c2e9738ba9d301775488978476865a21fe415ba97fe598960c7c07b8a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d705e859ec28019828ed7db3e011abb707ae46acaf485cf1869213a31f5743"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:27 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1, "d3484e71f5c4bcf8474f8a1f738194b5d7ff000800f4d1b7c8fafe3dbdb90d5838b55c85b85dc721f14b8100fdffffffffffffff00", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x10001, 0x0) getegid() write$eventfd(r1, &(0x7f0000000100)=0xfffffffffffffffd, 0x8) 14:02:27 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061e43f3f3f300000000000000000000000000000000003600", [0x401, 0x749]}) 14:02:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') sched_getaffinity(r1, 0x8, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:27 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:27 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:27 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:27 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2040, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) fcntl$setlease(r1, 0x400, 0x1) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)=""/69, &(0x7f0000000180)=0x45) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) set_tid_address(&(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) write$P9_RREADLINK(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000bc5ce07c9c69d3daf0ac17010007002e2f66696c6530f5b87820a4f5b4fb92b8637dbda9e4a89dfb23"], 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r2, 0x6) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000240)={0x1, {{0xa, 0x4e24, 0x9a5, @local, 0x3}}}, 0x84) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000cc0)={r5, @local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) getresuid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast1, 0x4e20, 0x5, 0x4e22, 0x0, 0xa, 0x100, 0xa0, 0x27, r5, r6}, {0x7, 0x2, 0x8, 0xc14990340, 0xd0, 0x100000001, 0x2, 0x100000001}, {0x6, 0x3, 0x8000, 0x7fff}, 0xffffffff, 0x6e6bb6, 0x1, 0x0, 0x1ac3e254d1b0da84, 0x2}, {{@in=@rand_addr=0x8001, 0x4d6, 0xff}, 0x7, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x3500, 0x0, 0x2, 0x7, 0x4, 0xfb, 0x4}}, 0xe8) 14:02:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3ff, 0x41) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x17, 0x10, "03004e71da2b278ffe973299c6b90d5838ea84f805874554d245218a8eafafb55c85b856c721064bb5d320e608e600", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x0, 0x800]}) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 14:02:28 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:28 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="e4fe98d120d937d6ac03394625b9c9053d0ad9d4f41035ef4e4de296081795bbb2389738ddb71032b0b90987d469af1e3496371232a5d230d3a5ba3b1f7a87f375ea80d06aa065dbeef50959fcca82fc88e5cc9bb3a8b1dcec30de7ef4dbc10c6876b3ac187fb35cae8b44f4733234abfc80854bddb1da034c9d26d127df82", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r2]) fchown(0xffffffffffffffff, r1, r2) 14:02:28 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) ioctl$VT_RELDISP(r1, 0x5605) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)=0x2) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:28 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3f, 0x3, 0x20, 0x5, 0x2, 0x6, 0x8001, 0x28f, 0x38, 0x331, 0x40, 0x401, 0x20, 0x2, 0x1f, 0x9}, [{0x0, 0x8, 0x3, 0x7, 0x6, 0x1, 0x80000000, 0x1}], "d3921a394e7629aee0bfdb52ae30dd22fdafc1d67e9f3f197a44e031a56f8ff1f76340b1eacb5a1c1c4aff19c4e09428a09204339b082f5848fed8946983805a09b992f193de4e4b512e1afbc9b205ab1789924137d5525a4285b3ac729b405391c2a03388627ab68c7654d5606ad0251005931784e2f72db244838fc4fba9750029200a5cf74b248f3a671eee49c699fd394520661cd774b5f223768c66e2d12d31cda363d9525af564ba900f186b130bf56011974378d9d52fa4bae66e8ea899bd9631a2e5c863feee57a92223f2fc9c5f1fdc4824de1a7ebd5fe9cf", [[]]}, 0x235) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:28 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r1, 0x51, 0xf6}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'ghash-clmulni\x00'}}, &(0x7f0000000180)="c92a61fa5e807a113ff75da25e41356f5ea58c4c9c30c4ee75933108440121b7186c574c5e44762364b02edee69dd40e05b17d0d207d251c2d5f184ad8847db91a4a417aefe80eea57a15d3abd4f17bef3", &(0x7f0000000240)=""/246) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:28 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:28 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) socket$inet6(0xa, 0x800, 0x1a) 14:02:28 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:29 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000240)={@rand_addr="540743f1b9527f47669291a7afd1db10", r2}, 0x14) 14:02:29 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:29 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(0xffffffffffffffff, r1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)) getsockname(r2, 0x0, &(0x7f0000000580)) linkat(r2, &(0x7f0000000400)='./file0\x00', r0, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/197) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:29 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:29 executing program 5: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x62000, 0x0) sendfile64(r0, r2, 0x0, 0x3) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) removexattr(&(0x7f0000000000)='\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:29 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) socket$inet6(0xa, 0x4, 0x3) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000300)=""/179, 0xb3, 0x2000, &(0x7f00000001c0)={0x11, 0x10, r6, 0x1, 0xe3, 0x6, @dev={[], 0xe}}, 0x14) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {r7, r8/1000+10000}}) 14:02:29 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:29 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x1}, 0xffffffc1) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) 14:02:29 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:30 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:30 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xfeec17800dd3173b, 0x100) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x20) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x404, 0x749]}) 14:02:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x3ff]}) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)=""/147, 0x93) 14:02:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x5, 0x200, 0x3}) 14:02:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:30 executing program 3: r0 = socket(0x10, 0x2, 0x7f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000cc0)={r2, @local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x16, @multicast1, 0x4e22, 0x2, 'lc\x00', 0x1d, 0x0, 0x10}, 0x2c) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r6 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)) getsockname(r6, 0x0, &(0x7f0000000580)) linkat(r6, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) fstat(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x90008461}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000190010002dbd7000ffdbdf250000ffff000000000000000000000000e00000020000000000000000000000004e2307ff4e23fffc0a00a060bb000000", @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="c7ffffffffffffffbf9d3804000000000200000000000000fdffffffffffffff200000000000000020000000000000000100000000000000ff7f000000000000000000000000000000090000000000000000000000000000090000000000000007000000b66b6e00010000000000000014000e00ac14141f0000000000000000000000000c00100001000000000000000c001000010000000000000008000300191a0000"], 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r8 = socket(0x11, 0x1, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x9, 0x0, 0xff, 0x1e, 0xfffe, 0x9}, &(0x7f0000000440)=0x20) r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:30 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x8, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup2(0xffffffffffffffff, r1) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./bus\x00', 0x6, 0x4) fcntl$setstatus(r3, 0x4, 0x6100) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000003c0)=[0x7]) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) lseek(r3, 0x20000010000, 0x2) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f00000000c0)=0x4000, 0x8000fffffffe) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000)=0xcf, 0x4) readahead(r1, 0x7fffffff, 0x10) [ 469.576796] [ 469.578467] ====================================================== [ 469.584858] [ INFO: possible circular locking dependency detected ] [ 469.591318] 4.9.141+ #23 Not tainted [ 469.595053] ------------------------------------------------------- [ 469.601473] syz-executor.2/2937 is trying to acquire lock: [ 469.607074] (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_reread_part+0x1e/0x40 [ 469.616160] but task is already holding lock: [ 469.620807] (&lo->lo_ctl_mutex#2){+.+.+.}, at: [] lo_compat_ioctl+0x103/0x140 [ 469.630267] which lock already depends on the new lock. [ 469.630267] [ 469.637275] [ 469.637275] the existing dependency chain (in reverse order) is: [ 469.644879] -> #2 (&lo->lo_ctl_mutex#2){+.+.+.}: [ 469.650432] lock_acquire+0x130/0x3e0 [ 469.654758] mutex_lock_nested+0xc0/0x900 [ 469.659422] lo_release+0x85/0x1a0 [ 469.663473] __blkdev_put+0x636/0x840 [ 469.667790] blkdev_put+0x85/0x560 [ 469.671856] blkdev_close+0x8b/0xb0 [ 469.675986] __fput+0x263/0x700 [ 469.679768] ____fput+0x15/0x20 [ 469.683561] task_work_run+0x10c/0x180 [ 469.687951] exit_to_usermode_loop+0x129/0x150 [ 469.693170] do_syscall_64+0x3e2/0x550 [ 469.697567] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 469.703261] -> #1 (loop_index_mutex){+.+.+.}: [ 469.708469] lock_acquire+0x130/0x3e0 [ 469.712786] mutex_lock_nested+0xc0/0x900 [ 469.717458] lo_open+0x1b/0xa0 [ 469.721246] __blkdev_get+0x263/0xd60 [ 469.725555] blkdev_get+0x2da/0x920 [ 469.729699] blkdev_open+0x1a5/0x250 [ 469.734192] do_dentry_open+0x3ef/0xc90 [ 469.738671] vfs_open+0x11c/0x210 [ 469.742633] path_openat+0x542/0x2790 [ 469.746938] do_filp_open+0x197/0x270 [ 469.751248] do_sys_open+0x30d/0x5c0 [ 469.755461] SyS_open+0x2d/0x40 [ 469.759247] do_syscall_64+0x19f/0x550 [ 469.763646] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 469.769249] -> #0 (&bdev->bd_mutex){+.+.+.}: [ 469.774332] __lock_acquire+0x3189/0x4a10 [ 469.778980] lock_acquire+0x130/0x3e0 [ 469.783290] mutex_lock_nested+0xc0/0x900 [ 469.787941] blkdev_reread_part+0x1e/0x40 [ 469.792591] loop_reread_partitions+0x7c/0x90 [ 469.797603] loop_set_status+0xa7e/0xfe0 [ 469.802180] loop_set_status_compat+0x9a/0xf0 [ 469.807181] lo_compat_ioctl+0x10e/0x140 [ 469.811742] compat_blkdev_ioctl+0x3a4/0x3630 [ 469.819605] compat_SyS_ioctl+0x12d/0x1fd0 [ 469.824354] do_fast_syscall_32+0x2f1/0xa10 [ 469.829174] entry_SYSENTER_compat+0x90/0xa2 [ 469.834078] [ 469.834078] other info that might help us debug this: [ 469.834078] [ 469.842205] Chain exists of: &bdev->bd_mutex --> loop_index_mutex --> &lo->lo_ctl_mutex#2 [ 469.851860] Possible unsafe locking scenario: [ 469.851860] [ 469.857894] CPU0 CPU1 [ 469.862565] ---- ---- [ 469.867211] lock(&lo->lo_ctl_mutex#2); [ 469.871625] lock(loop_index_mutex); [ 469.878203] lock(&lo->lo_ctl_mutex#2); [ 469.885132] lock(&bdev->bd_mutex); [ 469.889064] [ 469.889064] *** DEADLOCK *** [ 469.889064] [ 469.895102] 1 lock held by syz-executor.2/2937: [ 469.899746] #0: (&lo->lo_ctl_mutex#2){+.+.+.}, at: [] lo_compat_ioctl+0x103/0x140 [ 469.909724] [ 469.909724] stack backtrace: [ 469.914207] CPU: 1 PID: 2937 Comm: syz-executor.2 Not tainted 4.9.141+ #23 [ 469.921207] ffff8801a34df788 ffffffff81b42e79 ffffffff83c8e360 ffffffff83cb4130 [ 469.929247] ffffffff83c8d5e0 ffff8801d718a090 ffff8801d71897c0 ffff8801a34df7d0 [ 469.937274] ffffffff813fee40 0000000000000001 00000000d718a070 0000000000000001 [ 469.945299] Call Trace: [ 469.947868] [] dump_stack+0xc1/0x128 [ 469.953215] [] print_circular_bug.cold.36+0x2f7/0x432 [ 469.960036] [] __lock_acquire+0x3189/0x4a10 [ 469.965991] [] ? trace_hardirqs_on+0x10/0x10 [ 469.972035] [] ? __lock_acquire+0x654/0x4a10 [ 469.978085] [] lock_acquire+0x130/0x3e0 [ 469.983703] [] ? blkdev_reread_part+0x1e/0x40 [ 469.989942] [] ? blkdev_reread_part+0x1e/0x40 [ 469.996077] [] mutex_lock_nested+0xc0/0x900 [ 470.002033] [] ? blkdev_reread_part+0x1e/0x40 [ 470.008271] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 470.015107] [] ? mutex_trylock+0x3e0/0x3e0 [ 470.020972] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 470.027879] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 470.034700] [] blkdev_reread_part+0x1e/0x40 [ 470.040676] [] loop_reread_partitions+0x7c/0x90 [ 470.046990] [] loop_set_status+0xa7e/0xfe0 [ 470.052856] [] loop_set_status_compat+0x9a/0xf0 [ 470.059206] [] ? loop_set_status+0xfe0/0xfe0 [ 470.065245] [] lo_compat_ioctl+0x10e/0x140 [ 470.071122] [] ? lo_ioctl+0x1910/0x1910 [ 470.076730] [] compat_blkdev_ioctl+0x3a4/0x3630 [ 470.083042] [] ? __fget+0x214/0x3d0 [ 470.088306] [] ? cfq_merged_request+0x110/0x110 [ 470.094612] [] ? __fget+0x23b/0x3d0 [ 470.099876] [] ? __fget+0x47/0x3d0 [ 470.105061] [] ? security_file_ioctl+0x8f/0xc0 [ 470.111293] [] ? cfq_merged_request+0x110/0x110 [ 470.117613] [] compat_SyS_ioctl+0x12d/0x1fd0 [ 470.123665] [] ? do_ioctl+0x60/0x60 14:02:30 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) socket$inet6(0xa, 0x4, 0x3) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000300)=""/179, 0xb3, 0x2000, &(0x7f00000001c0)={0x11, 0x10, r6, 0x1, 0xe3, 0x6, @dev={[], 0xe}}, 0x14) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {r7, r8/1000+10000}}) 14:02:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x529000, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x80000001) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000003c0)=[0x7]) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r2, 0x20000010000, 0x2) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f00000000c0), 0x8000fffffffe) fcntl$setstatus(r2, 0x4, 0x2b00) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r4, 0x0, 0xfffffffffffffffc) sendfile(r1, r4, &(0x7f00000000c0), 0x8000fffffffe) lseek(r1, 0x354, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) dup(r4) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f0000000040)={0xfa, 0x8, 0x6, 0xb3, 0x2, 0x1ff}) 14:02:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5aa6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\xfb:\x03nodev\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='vboxnet1vboxnet0(\x00', r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0)={r2, 0x3, 0x85}, &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'digest_null\x00'}}, &(0x7f00000002c0)='67\\', &(0x7f00000004c0)=""/133) write(r1, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r5 = dup2(0xffffffffffffffff, r3) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000100)) read(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) getsockname(r5, 0x0, &(0x7f0000000580)) linkat(r5, &(0x7f0000000400)='./file0\x00', r1, &(0x7f00000006c0)='./file0\x00', 0x1400) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x9e5af798cd5e9a0, 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x30, 0x0) 14:02:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) [ 470.128929] [] do_fast_syscall_32+0x2f1/0xa10 [ 470.135093] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.141765] [] entry_SYSENTER_compat+0x90/0xa2 [ 470.148115] loop_reread_partitions: partition scan of loop0 (ÓHNqÚ+'¯þ„¾¢{”µ×Ð$å6ôÑ·Èúþ=½¹ X8ê„6A‡ETÒE!ŠŽ¯¯µ\…¸]Ç!ñKµÓ æ6) failed (rc=-13) 14:02:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 14:02:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'bcsh0\x00', {0x2, 0x4e23, @loopback}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) rt_sigreturn() r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0xf6b74a012976d1b2, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4006000) 14:02:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 5: creat(&(0x7f00000001c0)='./file0\x00', 0x20) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r0, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000003c0)={0x0, 0xb8, "44bf816d6735d1f331657fcbe244d8b6d21c2721c41084ee70d65a1951d25cf5ca33bbe8c73302fd1dc58beba14fd0593e8a8b711342d5914805e40f2824b0b36b928097d4d83746de0ab243ab923cf70818459aad78535c02f8de6000e2d71e4e4b4691896bdc982cb349dfe74badd7f862e32e1e9b42cfd2a7dceb28ae8f43ff41da4add627b8c9b5dbf489b2bc976aa4b9a98a82ed7a19ee8b015bb3190caf654bc640f3a08ab05fd89dbe4d371fd342925de9f06f157"}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r2, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000080)=r3) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RSTATFS(r4, &(0x7f0000000240)={0x43, 0x9, 0x2, {0x3ff, 0x800, 0x3, 0x80, 0x4a, 0x80, 0x3, 0x3a80d459, 0x1}}, 0x43) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) gettid() write$selinux_context(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) 14:02:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000cc0)={r1, @local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f0000000000)=@ll={0x11, 0x7, r1, 0x1, 0x81, 0x6, @random="1a3badfadc48"}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="4ce5ed324c92b66714fa899b75b85d8b487bbbb3a2c35a9593c8fcfd1ea21e663dac5b170157e06f0bcc5767601b906c45c5e6e47376cd48c24ae43d20801ca39b96e72a2d7728b6acc9980d75ef96afc9b32e127097be3a1f980cefdb12b2da6258f0dc92dfa51925bb25a34d0cbe65e803645864716cbb9242fdbc3119efa644e888cc5451c8fc322d8e49ed5a7a686b5b4790090574b11080db5f27c0b15e46b1f06708bfecc220daba9555604f08b106bfc139fae6c8e248b1a6dc7ec87393e2484ee5e89d0dc50702", 0xcb}, {&(0x7f0000000080)="3ed9b6e020c351bea0143c0164d7400e666124069d22141e0ffa83e0533d3871aa711b9e1c0007f4811d204dcad2f78ddf02f1afa0", 0x35}, {&(0x7f0000000340)="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", 0xff}, {&(0x7f0000000180)="e5b5e1c064a2e72463558d2f8342311c69fcf93baea0c7aa0cf16804b884ffdb3b386e43de4fbce9cd20d6c8e043406e43b4aa09ab21ba0961807e2b32254e9c865987c1d954ae5654d503f138e4e7", 0x4f}, {&(0x7f0000000440)="4050898fc2b40e46514a09ac56787e64ba02217ad8f69118bc6cddf71b3888e5dbe5e3a7c1a5b25375f353f3cc79d73530ca09a63eb006f09b82416dff52b208a87eecdab3630f7d8c667f6fb9695d620ed9f6affcf6996429a1be8c89b99a5e25eaefa00104702ec392ad17fe84e43aa15dd5c2c2b9c27d6034bc78d6dce05fd64e6d2db3f83c97d6cdae1dfc11b2c6458242f40cbf41e4cd67b6ac29a126273bbfea9cc9e2bbc16dd2f6e5bd45d8cf28a2e86cff3acc7091da962f17f998965bbe3e2d167b07aba473182050f7246b43f071ec7a7d8b2db4b9c258993cdc9f10ae5244b1e1f06a42eae6ef3dc44e97f1e37b5593d6", 0xf6}, {&(0x7f0000000540)="8620b3426fe9512c7f4fb9569f05f4098ef1dc984116696cbf8362703309497d1a7a812ac8dcc0b1edc30c98ce6151a3744bb42e4da054bcd8c2ec7e3fa640ccd3cca3a1d2fa8480e0e8d5e99021ddedd26efc52d4901d3f347555040d830df38155e3f39487e9ca2b25a4c459ff637ec626634b739661a0ad4557a6f961612a", 0x80}, {&(0x7f00000005c0)="21dc4d4e29b62f4003cd70d14800eb4de0fa473ecb945e35a54a5a", 0x1b}, {&(0x7f0000000600)="d06ab1c71116cd5dcf6eda42d7720c9bb650ad7bd7350429e68cb407c9", 0x1d}, {&(0x7f0000000640)="b7550dd343e8972cffb82b18439cbb9df6dfcd7813b5ea99ccf28225848008f874f7a588f2b953bd94c5d217bbe9deec3153fee51774c9fa1aed4e82e6b9a03ce60bed53569b1f0eda041b44a5481ac9d537032724cb11912237ddbaf592248cd122f9023d10a51b5f4a0d7d25714d369e7a5c66014b04903d7ff565ef371983b88b2272014b5e67f97cf5e0bf256cfef91a3f272c82455a34972b3d6525cf26b7569380cbd06ec9c3380a1254d558fd2dac5c72f942ececa6fd9a5572bccf5bbd429cd4587247835407fd594cd7557ecabb95f9117d19325c6ef109bd0c54", 0xdf}], 0x9, &(0x7f00000007c0)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000800)="e6db1e8d8ad30e291fefc40dcb6573a60013ca27400948dafc20f3c9e79024368c4d3bf6b5d9f20de4466ceec272ee96a4d07716cdbbaed8e90358c67febbfbd5b4db6157008584e383c95b1a08513fc895095985bf5250d5334b497e3cf0943548c9721a450c5227e3d077bda3fe8b43722b0f9ec309cbe808950bf38b2e56599063cad21191e6e80001608dac899aad92b108f37b6390611fa56d5ee61e5cf32220073f64f700af32ed9bc8c529d5e40ab8cb23b892979590295138a3731326fb3c1035097aa", 0xc7}, {&(0x7f0000000900)="f12b346c145cd1efd37e58743933ab30aff83eccfba715311b0fec8f3d28144a0970d246a49a19ab21216b8e8f7d925d020845ff12e7abdfc287c0c030b04223310e73201cc2bb673002811f5bf8f44a1568d22565d625c73a2e73b3a0a97aa9654b70e0f28661633c5717912740379b76adf290e2c0dea4bcc4f6c703eca37e628e6cca45345c781e20c6381a6e1c", 0x8f}, {&(0x7f00000009c0)="8be25c86", 0x4}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="cc5a117c1a414beb98c4d23344ec2f7793aeb9aa3dc0a6f2828470d51890c6654451a9195543425e37656d927a3353a90cd7c13d94dcdbf2838288c65d638d1dceaed00c14432371479f706e080c6049a60c290109ddd8d1f8e6780a81c4b663aef48aeb24ccf1452cc456fc84e4fc52d4bb8f53ef3c39b19186a9088e4ddbbe7584373b6d2feea3bb33c199e9a6315f9189867c448566b306c90718a43c6192bb12c2ed929934836537b7d296191b408b001e0be76a188674f21ab895dc5ef4189de4e0f11203279721a680857ccb470c12f1fefe6d", 0xd6}, {&(0x7f0000000b40)="c9dbdf2df8ec10a3a55a69f7e49efc4def146912a76489cbf2a85ced742720912b0f7b06a8f4d461395ee0a3d7", 0x2d}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="dfafcf9037cc77ad057774794151bb700683dc192827d185471a739b2ffe05804c9b9faab964ffd795f608eaef99baaa937ebd71af085358c1d294efcd5ca055759166590bc5834404ffde9956d0dc81f02de94d028c19806272eab01b3f044ece40c67701b473a804f072d6741e9711bbc1844bd2ba2642fbbc10f40570c7143b6349cbf7cbca973e90679bc280c8b59a38ec28961d93b7", 0x98}], 0x8, &(0x7f0000001c80)=[@timestamping={{0x10, 0x1, 0x25, 0x5}}, @mark={{0x10, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x10}}, @mark={{0x10, 0x1, 0x24, 0xf9d}}, @mark={{0x10, 0x1, 0x24, 0x183}}, @mark={{0x10, 0x1, 0x24, 0x20}}], 0x60}}], 0x2, 0x120) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x15, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x7fffffff]}) 14:02:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(0x0, 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(0x0, 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:31 executing program 3: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) open(&(0x7f0000000040)='./bus\x00', 0x40000, 0x4) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x80000001, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:32 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(0x0, 0x88, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x17, 0x8, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:32 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x190) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x5, "bea27b8194b5d7d06fc78636d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e600", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x601, 0x749]}) r1 = timerfd_create(0x5, 0x800) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 14:02:32 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:32 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80010018}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xba07116f2ba9dede}, 0x40) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x92d0e8aeb81b4772}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="9e1309f60d33aebc2168b3571cf0e337c899bc1bb73f5b0255ad5f1c2233bb84c9c29966665abc02a8d921286fa03cdd38090fafc3bee1dec2fcedc711218e9d6527373e3089687418c12308a07272aca7e8acb659c6b2e4488e30d9254d3b005e33371b934d4911b3fc22e2856708d15377803a537359d243d270ca07fd7b756eccac79a044132cf3a537a0d64022731f569fa7d72bbc4cdaa51514df3d2b723786780700653a0e0093523b5bfd38545124acd0da8aeb8a4f6f476a076f415fb688db7505bb26614ac30a0961675bf7a7275335c322613ba6d645c4d5d413e3f9", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fcdbdf2505000000100001006e657464657673696d000000100002006e657464657673696d3000000800030001000000080001007063690014000200303030303a30303a31302e30000000000800030000000000"], 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x20020000) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c800000", @ANYRES16=r3, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x8, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7f}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x40000) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='cgroup\x00') ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000300)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000080)={0x1}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:32 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) pipe(&(0x7f0000000100)) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xe) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) [ 471.844419] blk_update_request: 3616 callbacks suppressed [ 471.844423] blk_update_request: I/O error, dev loop6, sector 0 [ 471.856192] buffer_io_error: 3616 callbacks suppressed [ 471.856196] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 471.869226] blk_update_request: I/O error, dev loop6, sector 4 [ 471.875207] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 471.882872] blk_update_request: I/O error, dev loop6, sector 8 [ 471.888857] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 471.896595] blk_update_request: I/O error, dev loop6, sector 12 [ 471.902676] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 471.910327] blk_update_request: I/O error, dev loop6, sector 16 [ 471.916384] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 471.924491] blk_update_request: I/O error, dev loop6, sector 20 [ 471.930569] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 471.938239] blk_update_request: I/O error, dev loop6, sector 24 14:02:32 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="7f454c46015e011f00000000000000000300380009000000a2000000380000008301000003000000d000200001001f00030002000000000023a8074400800000060000000100000053c80e7fcb0000000300000047000000070000002b00000089000000a40600000800000052000000f8ffffff010000005eaaa92c6592e4ed30976813f1771f3666a30a1fe1ba1a409c2e9738ba9d301775488978476865a21fe415ba97fe598960c7c07b8a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d705e859ec28019828ed7db3e011abb707ae46acaf485cf1869213a31f5743"], 0x3ad) pipe(&(0x7f0000000100)) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) [ 471.944286] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 471.951981] blk_update_request: I/O error, dev loop6, sector 28 [ 471.958060] Buffer I/O error on dev loop6, logical block 7, lost async page write [ 471.965687] blk_update_request: I/O error, dev loop6, sector 32 [ 471.971755] Buffer I/O error on dev loop6, logical block 8, lost async page write [ 471.979409] blk_update_request: I/O error, dev loop6, sector 36 [ 471.985452] Buffer I/O error on dev loop6, logical block 9, lost async page write 14:02:32 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:32 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x17, 0x1, "d3484e71da2b27affe84bea27b559eb5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14ba2d320e6063608e6", "d0dd83e6faff94d4e27f000000008c07000000000003006700", [0x9, 0x2]}) 14:02:32 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x3ad) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:32 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ftruncate(r1, 0x6) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup2(0xffffffffffffffff, r3) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r6, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) write$nbd(r6, &(0x7f0000000180)={0x67446698, 0x1, 0x1, 0x3, 0x3, "b830911a5537ff7f571fe51064ab6aa17bb1f272f2e53cbc5ed575d11ce7668d9ba307f664a42c597b95f77bdb12aba3a90337a7bebb261635ab5bdc3ce16f3e3ce13b035e94c89109e1555fe6fc642344b2832792ebf0f52dba161931969b8217a3b110b740994e8cd0"}, 0xfffffffffffffd98) getsockname(r4, 0x0, &(0x7f0000000580)) linkat(r4, &(0x7f0000000400)='./file0\x00', r2, &(0x7f00000006c0)='./file0\x00', 0x1400) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000000)=r4) 14:02:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x417, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "684af145ce57ef3c1ebcf3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000000)="9f4875a161ecc8153e3d713125616f8dec00d4c40116c35623ae950519b21e2cda80387c80dd9031520e314d007026dfa731003d971d767d4722643c1c548dba", 0x40}, {&(0x7f0000000040)="a9cdeb9c2bdeb6a49da044358a3d4bfda099f93611a58a264f8b58", 0x1b}, {&(0x7f0000001240)="587f3dcc635f199efde1bace9db66f2c37fe148bcd16a5e335b15ed22044432cde0c851e5cdedc9fd1c1364bf3c112f4a46d6e0815c152226b69983116e0b19186d99776a47cd43d828f8408cd0991574f31e2d83d5cb3d11e522581ebed6b6f80893d5df3b88da4184df7e0e49d06da231d6d52729bfdbaa450eb81861e74b37a75c6a5a39eb5df12fee0e07f92b859c8dc58aa7a091fd05154e969b7bef868264bc5a576132cc584227433ea0e83ab567f23", 0xb3}], 0x4, 0x127) pipe(&(0x7f0000000180)) 14:02:32 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x0) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:33 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="7f454c46015e011f00000000000000000300380009000000a2000000380000008301000003000000d000200001001f00030002000000000023a8074400800000060000000100000053c80e7fcb0000000300000047000000070000002b00000089000000a40600000800000052000000f8ffffff010000005eaaa92c6592e4ed30976813f1771f3666a30a1fe1ba1a409c2e9738ba9d301775488978476865a21fe415ba97fe598960c7c07b8a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d705e859ec28019828ed7db3e011abb707ae46acaf485cf1869213a31f5743"], 0x3ad) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f0000000340)=""/180, 0xb4}], 0x3, 0x5) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x7]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x7d2f7d2c073309b0, 0x831bdd606bac0a77, 0x1, 0x3, 0x4}}) 14:02:33 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x40000007ffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYPTR=&(0x7f0000000480)=ANY=[]], 0x3}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000003c0)=[0x7]) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f00000000c0), 0x8000fffffffe) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000280)={0x0, r5, 0xaf, 0x7fffffff, 0x2, 0x7ff}) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0x315, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}}, 0x20000004) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f00000002c0)={'system_u:object_r:apm_bios_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x3}, 0x44) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) 14:02:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) 14:02:33 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x0, 0x3) write$binfmt_elf32(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="7f454c46015e011f00000000000000000300380009000000a2000000380000008301000003000000d000200001001f00030002000000000023a8074400800000060000000100000053c80e7fcb0000000300000047000000070000002b00000089000000a40600000800000052000000f8ffffff010000005eaaa92c6592e4ed30976813f1771f3666a30a1fe1ba1a409c2e9738ba9d301775488978476865a21fe415ba97fe598960c7c07b8a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d705e859ec28019828ed7db3e011abb707ae46acaf485cf1869213a31f5743"], 0x3ad) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:33 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x0) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:33 executing program 5: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x20, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1, 0x1}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x20, 0x4bd73213}, &(0x7f0000000180)=0x7aa, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x7a95}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r0}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) dup(0xffffffffffffffff) ftruncate(r1, 0x6) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 14:02:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) 14:02:33 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x0) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000cc0)={r3, @local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', r3}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:33 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(0x0, 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = eventfd2(0xf6e, 0x80000) read$eventfd(r1, &(0x7f0000000000), 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) fcntl$dupfd(r2, 0x0, r2) dup2(0xffffffffffffffff, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r4, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) pselect6(0x40, &(0x7f0000000180)={0x5, 0x80, 0x2, 0x7f, 0x3, 0x2e, 0x400, 0x9}, &(0x7f00000001c0)={0x0, 0x4800000000000000, 0x6, 0x3, 0x5, 0x8, 0x3, 0x6}, &(0x7f0000000240)={0x8, 0x6, 0x7, 0xfffffffffffff152, 0x5ba1, 0xb01, 0xfff}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={0x4}, 0x8}) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r6, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r7 = dup2(0xffffffffffffffff, r2) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RLOCK(r8, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) r9 = fcntl$dupfd(r8, 0x605, r7) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000040)={0x7e, 0x3b, 0x3, 0x5, 0x0, 0x3, 0x1f, 0x8, 0x0, 0x42c, 0x1fffc000, 0x4}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x17, 0x11, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) 14:02:33 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)="860b50c009c223bf0a5d00f1c278d35e612d783d9a478c19293af79881f62c19f97bf1d0c35f2d102db596c2a81a63cca3c35eac94c0f67b7e5a973e7315eccecea972d65deda982ed0cebc9ea324a69ec692506ff2c60325db12f4e0c3aa2cb4b23866852613e6d3c7b6446212991b942367f3cd56b60b639effba641c8d304d57fd18c263210493843942ad9276bffbd575594005ee25d5cd7d22ad059595ebd97774e008649f5493c93a0ec54eedbd1963267ec015630162a7614c3a1f60143e336ce1c620afa4ee44d2585d6ebb8f7a36a6a4c1411796d19f8ff5aae03d2d087cfcaa084b2500a6bcd14", 0xec, 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) keyctl$read(0xb, r0, &(0x7f0000000340)=""/4096, 0x1000) 14:02:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r4, 0x4c01) 14:02:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:33 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x1}, 0x1c) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x400000, 0x400000) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffe00, 0x10}, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4"}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0xc7465f93baaa7315, 0x0) ioctl$int_out(r2, 0x6, &(0x7f0000000180)) 14:02:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0xbf393136a323c5a3) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x5, 0x1, "d3484e71da2b27affe84bea27b8194b5d7d024e536f4d1b7c8fafe3dbdb90d5838ea843641874554d245218a8eafafb55c85b85dc721f14bb5d320e6063608e6", "d0dd830aba7372061ec3f3f3f3741ecd5dff3b5c8f3f07798aea5ab6f14c8cd4", [0x401, 0x749]}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/load\x00', 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r3, 0x0, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x1000, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8020000}, 0x20000046) 14:02:33 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r4 = memfd_create(0x0, 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x18140) r6 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) 14:02:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x7]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x483c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x17abcf0d22e9a0de, 0x0) fdatasync(0xffffffffffffffff) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x88, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r3, &(