[....] Starting enhanced syslogd: rsyslogd[ 14.330875] audit: type=1400 audit(1566934527.005:4): avc: denied { syslog } for pid=1918 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. 2019/08/27 19:35:39 fuzzer started 2019/08/27 19:35:42 dialing manager at 10.128.0.26:42783 2019/08/27 19:35:42 syscalls: 1331 2019/08/27 19:35:42 code coverage: enabled 2019/08/27 19:35:42 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/27 19:35:42 extra coverage: extra coverage is not supported by the kernel 2019/08/27 19:35:42 setuid sandbox: enabled 2019/08/27 19:35:42 namespace sandbox: enabled 2019/08/27 19:35:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/27 19:35:42 fault injection: kernel does not have systematic fault injection support 2019/08/27 19:35:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/27 19:35:42 net packet injection: enabled 2019/08/27 19:35:42 net device setup: enabled 19:36:16 executing program 2: 19:36:16 executing program 5: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000180)=""/108, 0x6c) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RATTACH(r3, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x12, 0x762a9309, 0x7}}, 0x14) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0x1c) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={'veth0_to_hsr\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netstat\x00') ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f0000000380)={0x7, 0x5, 0x6, 0x2}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000003c0)={0x8001, 0x6, 0x1000}, 0x4) fcntl$addseals(r2, 0x409, 0x4) setfsuid(r0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000004c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000500)=0x0) sched_setscheduler(r8, 0x5, &(0x7f0000000540)=0x8) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000580)) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r9, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x200, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @mcast1, 0xffffffff}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000b40)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000b80)={@loopback, r10}, 0x14) pause() flistxattr(r5, &(0x7f0000000bc0)=""/4096, 0x1000) fchownat(r5, &(0x7f0000001bc0)='./file0\x00', r6, r7, 0x1000) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000001c00), 0x10) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000001c40)) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000001c80)='trusted.overlay.nlink\x00', &(0x7f0000001cc0)={'L+', 0x8}, 0x28, 0x1) io_setup(0x3, &(0x7f0000001d00)=0x0) io_cancel(r11, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x8, 0x401, r2, &(0x7f0000001d40)="47faa9521dabc01f91e128832d2bf9d90e7fd8dfd01a53e3a7c9d5dc772d1770ef2366ff191640ad3f2a8b820e5f4c3f1c9f33b608b6a52104897715da9e6778cf3cbaa3f93f8221be5ae8689889ce2ebd057b4ed31ddddbf3d4765d93ce02c2441632c41be5db0860d202fc31bb6ab0621f22895b25c951b11c3d087c38d3a6eaab2bd6dbc15b41e3dccdc9fb4eebcdac96e41f2f15ae9046fa3e3604f78c8446549b0dd634f8d286871b9670702391e5104782f66dcd47e1431009f447d724377a3338925f5bee4eb97961071812298c05b1640ab3d8567774e665c7", 0xdd, 0x5, 0x0, 0x2, r2}, &(0x7f0000001e80)) 19:36:16 executing program 3: 19:36:16 executing program 4: 19:36:16 executing program 0: 19:36:16 executing program 1: 19:36:17 executing program 2: 19:36:17 executing program 2: 19:36:17 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chroot(&(0x7f0000000000)='./file0/file0\x00') umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x2) 19:36:17 executing program 2: signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netstat\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) 19:36:17 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 19:36:17 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) syzkaller login: [ 64.863305] audit: type=1400 audit(1566934577.535:5): avc: denied { create } for pid=2291 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 64.888230] audit: type=1400 audit(1566934577.555:6): avc: denied { write } for pid=2291 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 64.917131] audit: type=1400 audit(1566934577.585:7): avc: denied { read } for pid=2291 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:36:18 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = open(0x0, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000100)) 19:36:18 executing program 4: pipe2(&(0x7f00000001c0), 0x4800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002700) socketpair(0x8, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) getpid() creat(0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x18) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 19:36:18 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 19:36:18 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000100)='N', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 19:36:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:36:18 executing program 0: 19:36:18 executing program 4: [ 65.850566] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 19:36:18 executing program 5: 19:36:18 executing program 4: 19:36:19 executing program 3: 19:36:19 executing program 0: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4800) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4008004) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x102002700) socketpair(0x8, 0x981c76971de6a41b, 0x8, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000240), &(0x7f0000000340)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000480)) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) 19:36:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000080)) 19:36:19 executing program 4: 19:36:19 executing program 2: 19:36:19 executing program 1: 19:36:19 executing program 2: 19:36:19 executing program 3: 19:36:19 executing program 4: 19:36:19 executing program 1: 19:36:19 executing program 5: 19:36:19 executing program 2: 19:36:19 executing program 3: 19:36:19 executing program 0: 19:36:19 executing program 4: 19:36:19 executing program 2: 19:36:19 executing program 5: 19:36:19 executing program 1: 19:36:19 executing program 4: 19:36:19 executing program 2: 19:36:19 executing program 3: 19:36:19 executing program 0: 19:36:19 executing program 5: 19:36:19 executing program 4: 19:36:19 executing program 1: 19:36:19 executing program 0: 19:36:19 executing program 2: 19:36:19 executing program 3: 19:36:19 executing program 5: 19:36:19 executing program 4: 19:36:19 executing program 2: 19:36:19 executing program 1: 19:36:19 executing program 3: 19:36:19 executing program 0: 19:36:19 executing program 5: 19:36:19 executing program 4: 19:36:19 executing program 3: 19:36:19 executing program 1: 19:36:19 executing program 2: 19:36:19 executing program 0: 19:36:19 executing program 4: 19:36:19 executing program 2: 19:36:19 executing program 4: 19:36:19 executing program 3: 19:36:19 executing program 0: 19:36:19 executing program 1: 19:36:19 executing program 5: 19:36:19 executing program 4: 19:36:19 executing program 2: 19:36:19 executing program 3: 19:36:19 executing program 5: 19:36:19 executing program 2: 19:36:19 executing program 1: 19:36:19 executing program 0: 19:36:19 executing program 3: 19:36:19 executing program 4: 19:36:19 executing program 1: 19:36:20 executing program 0: 19:36:20 executing program 2: 19:36:20 executing program 5: 19:36:20 executing program 4: 19:36:20 executing program 3: 19:36:20 executing program 2: 19:36:20 executing program 1: 19:36:20 executing program 5: 19:36:20 executing program 0: 19:36:20 executing program 4: 19:36:20 executing program 3: 19:36:20 executing program 4: 19:36:20 executing program 5: 19:36:20 executing program 1: 19:36:20 executing program 0: 19:36:20 executing program 3: 19:36:20 executing program 2: 19:36:20 executing program 3: clone(0x88200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 19:36:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000300)) 19:36:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5c0bcfe47bf070") r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000900), 0x4) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="0212000002000000000000e500000000"], 0x10}}, 0x0) dup2(r2, r1) 19:36:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @remote}}}}], 0x28}, 0x0) 19:36:20 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='joad ecryptfs trusted:user: '], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 19:36:20 executing program 2: mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 19:36:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000000)=0x0) io_getevents(r1, 0x3, 0x7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)={0x0, 0x989680}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x404, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8011) 19:36:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 19:36:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\'']}) 19:36:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) 19:36:20 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) 19:36:20 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = socket(0x10, 0x10000000000802, 0x0) dup2(r2, r0) 19:36:20 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x1}, 0x20) 19:36:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2}}) 19:36:20 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1) 19:36:20 executing program 4: socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfe51) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) 19:36:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x80000) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r3 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000180)=""/86, 0x56}], 0x1) socket$inet(0x2, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x200008924, &(0x7f0000000080)={'veth1_to_hsr\x00', @ifru_settings={0x1, 0xff, @fr_pvc=0x0}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000400)) getegid() 19:36:20 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/81, 0x51}, {0x0}, {&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000000300)}], 0x5, 0x0) 19:36:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={'veth0_to_bridge\x00', {0x2, 0x0, @broadcast}}) 19:36:20 executing program 1: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="480000001500197f09004b0101048c590188ffffcf5d3474ff9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee22600d4ff5bffff9b226452", 0x48}], 0x1) 19:36:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r1) 19:36:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 19:36:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='}eth1\x00', 0x0) write(r0, &(0x7f0000000180)="af", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0x10002) 19:36:20 executing program 0: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 19:36:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)) setrlimit(0x7, &(0x7f0000000100)) memfd_create(&(0x7f00000000c0)='}eth1\x00', 0x0) 19:36:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=ANY=[@ANYRES32=r0]}) 19:36:20 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @local}, 0x10) 19:36:20 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x10, 0x80003, 0x0) mount(&(0x7f0000000200)=@sr0='/dev/sr0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)='pstore\x00', 0x210000, &(0x7f00000004c0)='vmnet1\x00') ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c0000001200ff09fffefd956fa283b724a63540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aab05741d1434c9680337f900"/76, 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000001380), 0x400042d, 0x3a, &(0x7f0000000440)={0x77359400}) clock_gettime(0x0, &(0x7f0000005200)) ioctl$KDADDIO(r0, 0x4b34, 0x2) dup3(0xffffffffffffffff, r1, 0x68e4aa57b13012cd) rename(0x0, &(0x7f0000000240)='./file0\x00') madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) 19:36:20 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 19:36:20 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1f00c20000000180c200000086dd600ade000000000000ffffe0000002ff0200000000000000000000000000010200907800000000609433df00003a00ff00000000000000000000000000000100000000000000000000000000000001fca967e10700"/110], 0x0) 19:36:20 executing program 0: [ 68.066879] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 19:36:20 executing program 3: mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x82002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007a8000)) r2 = inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x70) poll(&(0x7f0000001300)=[{r1}], 0x1, 0x400) inotify_rm_watch(r0, r2) [ 68.110412] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 19:36:20 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x2) connect$inet6(r0, &(0x7f0000000000), 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:36:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000200)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) [ 68.166996] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.192061] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.200924] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 19:36:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f00000000c0)=0x54) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 19:36:21 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @multicast1}}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000035) fcntl$setstatus(r1, 0x4, 0x80000000002c00) 19:36:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfe51) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 19:36:21 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 19:36:21 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet6(0xffffffffffffff9c, 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 19:36:21 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') 19:36:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_buf(r2, 0x0, 0x30, 0x0, &(0x7f0000000140)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 19:36:21 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000e56927940000fff3fff8200040000000000000000008dc01"], 0x2c) 19:36:21 executing program 2: 19:36:21 executing program 3: 19:36:21 executing program 2: 19:36:21 executing program 3: [ 69.007027] SELinux: policydb table sizes (-201392128,2160895) do not match mine (8,7) 19:36:24 executing program 4: 19:36:24 executing program 5: 19:36:24 executing program 2: 19:36:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x108) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 19:36:24 executing program 0: 19:36:24 executing program 0: [ 71.797754] [ 71.799417] ====================================================== [ 71.805731] [ INFO: possible circular locking dependency detected ] [ 71.812135] 4.4.174+ #4 Not tainted [ 71.815764] ------------------------------------------------------- [ 71.822164] syz-executor.3/2666 is trying to acquire lock: [ 71.827784] (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 71.835808] [ 71.835808] but task is already holding lock: [ 71.841780] (sk_lock-AF_INET6){+.+.+.}, at: [] do_ipv6_setsockopt.isra.0+0x28a/0x30c0 [ 71.851979] [ 71.851979] which lock already depends on the new lock. [ 71.851979] [ 71.860301] [ 71.860301] the existing dependency chain (in reverse order) is: [ 71.867934] -> #1 (sk_lock-AF_INET6){+.+.+.}: [ 71.873145] [] lock_acquire+0x15e/0x450 [ 71.879424] [] lock_sock_nested+0xc6/0x120 [ 71.885972] [] do_ip_getsockopt+0x145/0x1480 [ 71.892692] [] ip_getsockopt+0x91/0x180 [ 71.899131] [] udp_getsockopt+0x4e/0x90 [ 71.905394] [] ipv6_getsockopt+0x101/0x250 [ 71.911999] [] tcp_getsockopt+0x8a/0xe0 [ 71.918279] [] sock_common_getsockopt+0x9a/0xe0 [ 71.925271] [] SyS_getsockopt+0x143/0x220 [ 71.931746] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 71.938999] -> #0 (rtnl_mutex){+.+.+.}: [ 71.943801] [] __lock_acquire+0x37d6/0x4f50 [ 71.950440] [] lock_acquire+0x15e/0x450 [ 71.956737] [] mutex_lock_nested+0xc1/0xb80 [ 71.963459] [] rtnl_lock+0x17/0x20 [ 71.969331] [] ipv6_sock_mc_close+0x10e/0x350 [ 71.976152] [] do_ipv6_setsockopt.isra.0+0x1bd1/0x30c0 [ 71.983743] [] ipv6_setsockopt+0xda/0x140 [ 71.990224] [] udpv6_setsockopt+0x4e/0x90 [ 71.996691] [] sock_common_setsockopt+0x9a/0xe0 [ 72.003674] [] SyS_setsockopt+0x159/0x240 [ 72.010136] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 72.017464] [ 72.017464] other info that might help us debug this: [ 72.017464] [ 72.025617] Possible unsafe locking scenario: [ 72.025617] [ 72.031683] CPU0 CPU1 [ 72.036351] ---- ---- [ 72.041014] lock(sk_lock-AF_INET6); [ 72.045080] lock(rtnl_mutex); [ 72.051145] lock(sk_lock-AF_INET6); [ 72.057715] lock(rtnl_mutex); [ 72.061251] [ 72.061251] *** DEADLOCK *** [ 72.061251] [ 72.067317] 1 lock held by syz-executor.3/2666: [ 72.072241] #0: (sk_lock-AF_INET6){+.+.+.}, at: [] do_ipv6_setsockopt.isra.0+0x28a/0x30c0 [ 72.082986] [ 72.082986] stack backtrace: [ 72.087490] CPU: 1 PID: 2666 Comm: syz-executor.3 Not tainted 4.4.174+ #4 [ 72.094420] 0000000000000000 ed47565bd3c2e14b ffff8800003975c0 ffffffff81aad1a1 [ 72.102526] ffffffff84057a80 ffff8801d9915f00 ffffffff83a8db50 ffffffff83acc5b0 [ 72.110619] ffffffff83a8db50 ffff880000397610 ffffffff813abcda ffff8800003976f0 [ 72.119222] Call Trace: [ 72.121813] [] dump_stack+0xc1/0x120 [ 72.127184] [] print_circular_bug.cold+0x2f7/0x44e [ 72.133775] [] __lock_acquire+0x37d6/0x4f50 [ 72.139754] [] ? check_preemption_disabled+0x3c/0x200 [ 72.146610] [] ? trace_hardirqs_on+0x10/0x10 [ 72.152683] [] lock_acquire+0x15e/0x450 [ 72.158321] [] ? rtnl_lock+0x17/0x20 [ 72.163703] [] ? rtnl_lock+0x17/0x20 [ 72.169079] [] mutex_lock_nested+0xc1/0xb80 [ 72.175061] [] ? rtnl_lock+0x17/0x20 [ 72.180435] [] ? _raw_spin_unlock_irq+0x28/0x60 [ 72.186768] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 72.193625] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 72.200390] [] ? mutex_trylock+0x500/0x500 [ 72.206292] [] ? mark_held_locks+0xb1/0x100 [ 72.212281] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 72.218618] [] rtnl_lock+0x17/0x20 [ 72.223827] [] ipv6_sock_mc_close+0x10e/0x350 [ 72.229981] [] ? fl6_free_socklist+0xb7/0x240 [ 72.236132] [] do_ipv6_setsockopt.isra.0+0x1bd1/0x30c0 [ 72.243077] [] ? ip6_ra_control+0x3c0/0x3c0 19:36:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_buf(r2, 0x0, 0x30, 0x0, &(0x7f0000000140)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 19:36:24 executing program 2: 19:36:24 executing program 5: 19:36:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) mkdirat$cgroup(r1, &(0x7f0000000000)='syz\xff\xda', 0x1ff) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000180)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) r2 = getpid() fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r2}) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) listen(r0, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x7, @dev={[], 0x25}}, 0x22, {0x2, 0x4e20, @empty}, 'caif0\x00'}) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)) getgid() preadv(r1, &(0x7f00000017c0), 0x1fe, 0x500) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x400) 19:36:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="480000001500197f09004b0101048c590188ffffcf5d3474ff9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee22600d4ff5bffff9b226452", 0x48}], 0x1) 19:36:24 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:24 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:24 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:24 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) [ 72.249060] [] ? trace_hardirqs_on+0x10/0x10 [ 72.255127] [] ? try_to_wake_up+0x701/0x1110 [ 72.261195] [] ? plist_check_head+0x4a/0x60 [ 72.267172] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 72.273935] [] ? avc_has_perm+0x164/0x3a0 [ 72.279742] [] ? avc_has_perm+0x1d2/0x3a0 [ 72.285638] [] ? avc_has_perm+0xac/0x3a0 [ 72.291475] [] ? avc_has_perm_noaudit+0x300/0x300 [ 72.299361] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 72.306114] [] ? check_preemption_disabled+0x3c/0x200 [ 72.312964] [] ? check_preemption_disabled+0x3c/0x200 [ 72.319795] [] ? sock_has_perm+0x1c8/0x400 [ 72.325671] [] ? sock_has_perm+0x2a8/0x400 [ 72.331627] [] ? sock_has_perm+0xa6/0x400 [ 72.337428] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 72.344990] [] ? __fget+0x13b/0x370 19:36:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x108) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 19:36:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_buf(r2, 0x0, 0x30, 0x0, &(0x7f0000000140)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 19:36:25 executing program 0: keyctl$update(0x2, 0x0, &(0x7f0000000180)="d5", 0x1) 19:36:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 19:36:25 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 19:36:25 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) [ 72.350259] [] ipv6_setsockopt+0xda/0x140 [ 72.356222] [] udpv6_setsockopt+0x4e/0x90 [ 72.362034] [] sock_common_setsockopt+0x9a/0xe0 [ 72.368336] [] SyS_setsockopt+0x159/0x240 [ 72.374119] [] ? SyS_recv+0x40/0x40 [ 72.379387] [] ? SyS_clock_gettime+0x118/0x1e0 [ 72.385616] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 72.392116] [] entry_SYSCALL_64_fastpath+0x1e/0x9a 19:36:25 executing program 3: 19:36:25 executing program 4: 19:36:25 executing program 3: 19:36:25 executing program 4: 19:36:25 executing program 0: keyctl$update(0x2, 0x0, &(0x7f0000000180)="d5", 0x1) 19:36:25 executing program 0: keyctl$update(0x2, 0x0, &(0x7f0000000180)="d5", 0x1) 19:36:25 executing program 3: 19:36:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_buf(r2, 0x0, 0x30, 0x0, &(0x7f0000000140)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 19:36:25 executing program 4: 19:36:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 19:36:25 executing program 3: 19:36:25 executing program 0: r0 = add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:25 executing program 4: 19:36:25 executing program 1: 19:36:25 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 19:36:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 19:36:25 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 19:36:25 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 19:36:26 executing program 0: r0 = add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:26 executing program 0: r0 = add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:26 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 19:36:26 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:26 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 19:36:26 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 19:36:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 19:36:26 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 19:36:26 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:26 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:26 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:26 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:26 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:26 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 19:36:27 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:27 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 19:36:27 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 19:36:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 19:36:27 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4000}) 19:36:27 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f0000000180)="d5", 0x1) 19:36:27 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f0000000180)="d5", 0x1) 19:36:27 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f0000000180)="d5", 0x1) 19:36:27 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 19:36:27 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 19:36:27 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 19:36:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:28 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180), 0x0) 19:36:28 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:28 executing program 2: 19:36:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:28 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:28 executing program 2: 19:36:28 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180), 0x0) 19:36:28 executing program 2: 19:36:28 executing program 2: 19:36:28 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180), 0x0) 19:36:28 executing program 2: 19:36:29 executing program 0: 19:36:29 executing program 2: 19:36:29 executing program 3: epoll_create1(0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) 19:36:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 19:36:29 executing program 0: 19:36:29 executing program 2: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f0000000180)="d5", 0x1) 19:36:29 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:29 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:29 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, &(0x7f0000000180)="d5", 0x1) 19:36:29 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:29 executing program 3: epoll_create1(0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) 19:36:29 executing program 0: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/relabel\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x40, 0x2, 0x1f, 0x7fffffff, 0x1, 0x8}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200000) write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x7, {0x5}}, 0x18) keyctl$update(0x2, r1, &(0x7f0000000180)="d5", 0x1) 19:36:29 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000000)="fd", 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xf85d2ec270cc3c1d, 0x52) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000180)=0x4) r2 = getpid() pipe(&(0x7f00000001c0)) write$cgroup_pid(r1, &(0x7f0000000140)=r2, 0x12) 19:36:29 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x40000, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000280)) r3 = request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r3) 19:36:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:30 executing program 0: syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x200) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="fc8d1433613920fba4ddb6d559609528079ca870d6f080938bde984eb9e19e81b9624cf31697e1262e2f311f683e953afb15743bfec717c88d2da76b56a3953c5e7686c5d3f29f209010b31b94e136a4e25b983547798df0bb54edc66c3a788ab77c2b98828c99b7886ff8ae559197228fcf65173c1fa0b917176678f85f777d1fa051b54aea39c991fab380ec207cff5e1eebf732011efe45055faf6a4a7bfc6d5515d9de3f8c0bd05a695a561a0d9db6bd56dcc15ed2e9d8c5c8f3c8e8e34b62cb036629c43450870d7a16", 0xcc, r1) 19:36:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() ptrace(0x10, r0) 19:36:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() ptrace(0x10, r0) 19:36:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() ptrace(0x10, r0) 19:36:30 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:30 executing program 3: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:30 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) 19:36:30 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18, 0x1, 0x0, {0xffffffff}}, 0x18) 19:36:30 executing program 3: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) 19:36:31 executing program 3: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) 19:36:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:31 executing program 0: r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='8', 0x2e9, r0) keyctl$update(0x2, r1, &(0x7f0000000180)="d5", 0x1) 19:36:31 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) 19:36:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 19:36:31 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:31 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x2881) getpeername$inet(r0, &(0x7f0000000400)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0)={r1, 0x6, 0x2f}, &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'crct10dif\x00'}}, &(0x7f0000000280)="a01bcf6e27ff", &(0x7f00000002c0)=""/47) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x100) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x6) keyctl$update(0x2, r2, &(0x7f0000000180)="d5", 0x1) keyctl$set_timeout(0xf, r2, 0x9717) 19:36:31 executing program 3: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 19:36:31 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:31 executing program 3: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 19:36:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:31 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 19:36:31 executing program 2: epoll_create1(0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) 19:36:31 executing program 3: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="144c44389109b98a66b5f80b449043dbc7252aae242574c0b90be528eed7c0a34741f06c643d39499cfb1094eac0dd80031682880345b63398b3c65a5b8084c9427f1826e1e0670314c8f8dbeda6b138612b71fe779bb13cde62b57753e9b3f9fc061114b4533fe18026947563666b1f0d3f6c778e1a2549c123e8d5f4831fb0b7bf7bf134d554ef1b623b2080934eb6ec963265406da38e6f4e345f86b5ff64f8f4147a988573655b517f67453910e701539bbb8ea3fe5fbe1ae8314451d66bb7c0244e4bc9bfbdef5f821bfb323dbf3e87e12f018f0da459cd6fe43ff50936b734ff0e2595c1e92717b36dfdc65a3198a49a30622de7ebbbdef0671e8cf5fd22389738c4d01da138478a8533b56e968507c7c49dfe71f4a18fcc4e51f1000000000000000000", 0x127, r0) getresuid(&(0x7f00000000c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$TIOCNXCL(r4, 0x540d) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r6, 0xb20, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) chown(&(0x7f0000000080)='./file0\x00', r2, r3) keyctl$update(0x2, r1, &(0x7f0000000180)="d5", 0x1) ioprio_get$uid(0xa32210a8ed18226, r2) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000340)={0x8, {{0x2, 0x4e20, @local}}}, 0x88) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000006c0)=0x0) syz_open_procfs(r8, &(0x7f0000000700)='net/ip_vs\x00') 19:36:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:31 executing program 1: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:31 executing program 1: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:31 executing program 1: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)) 19:36:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) 19:36:32 executing program 2: epoll_create1(0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) 19:36:32 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x1}) 19:36:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 19:36:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) 19:36:32 executing program 2: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:32 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) r1 = creat(&(0x7f0000000480)='./file0/file0\x00', 0x3) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) renameat2(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0/file0\x00', 0x3) openat$cgroup_int(r1, &(0x7f0000000240)='pids.max\x00', 0x2, 0x0) get_robust_list(r2, &(0x7f0000000140)=&(0x7f0000000100), &(0x7f00000001c0)=0x18) socketpair(0x8, 0x2, 0x1ff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000440)) lsetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000280)=@known='com.apple.FinderInfo\x00', &(0x7f0000000340)='syz', 0x3, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x80) 19:36:32 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x1}) 19:36:32 executing program 1: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 19:36:32 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x1}) 19:36:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) 19:36:32 executing program 2: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:32 executing program 1: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 19:36:32 executing program 2: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 19:36:33 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)={0x200, {{0xa, 0x4e23, 0x80000001, @empty, 0x2}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x6, @remote, 0x7}}]}, 0x110) write$FUSE_STATFS(r1, &(0x7f0000000300)={0x60, 0x552336c94ac3a020, 0x3, {{0x7fffffff, 0x1, 0x4, 0x1000, 0x1, 0x40, 0x8, 0x8}}}, 0x60) chdir(&(0x7f0000000100)='./file0\x00') keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) 19:36:33 executing program 1: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 19:36:33 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, 0x0) 19:36:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:33 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) 19:36:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:33 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, 0x0) 19:36:33 executing program 1: epoll_create1(0x0) epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 19:36:33 executing program 2: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:33 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000000)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f00000000c0)="d5", 0xfffffffffffffc3c) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x8584574b882487cb) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000140)={0x6, 0x80000000}) personality(0x8) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000180)={0xa, 0x0, 0x101, 0x1}, 0xa) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7, 0x7, 0x5, 0x4000000, 0x0, 0x5, 0xc012, 0x0, 0x4, 0x7f, 0x1f, 0x2, 0x8000, 0x2, 0x3, 0x1, 0x3, 0xffffffffffffff03, 0x5e5140a2, 0x8, 0x0, 0x800, 0x2, 0x40, 0x2, 0x0, 0x1f, 0x8, 0xfc0, 0x7, 0x6, 0x200, 0xfff, 0x8001, 0x2, 0x1ff, 0x0, 0x8, 0x4, @perf_config_ext={0xaf, 0x2}, 0x18, 0x2, 0x7, 0xe, 0xfffffffffffeffff, 0x4, 0xc33}, r2, 0xc, 0xffffffffffffffff, 0x2) r3 = add_key(&(0x7f00000004c0)='big_key\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="640b65eb7dbfc08f6c866e7eedbf040dee90d65a2f96df172b33857da5a61beb0770fd434719f0d30e52391d9d96a0b16ef03f5f581f", 0x36, 0xfffffffffffffffa) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000580)={0x2, 0x85, 0x3, 0x6, 0x8001, 0x100000001}) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="3abbcd4426380fd21afa8555f857f75a1bfa7a8437cf14712cb0ea9d5d0c29ef8e1e4936c808b2c99611669f97cb1c534304d140219f6f77d3ca373609919caa31cbd0c4e9d73e3342639e9c69a10a380234ef13cc048f23f8c357353a2baf12e01042b48bedd1b2869a2af74deb7b7aa95e1f0041f86a74e94f93ddeae87e2984226f7f557d7df1aba1604ab23cc4fc2be95f741d9ecdfe0777b0246e9890a804d6981ec9d48fc551e4a3dac6cf7d892959a0863ea64cf05fc17569cca983a551546dc172338df643f7002f1686cb808091080739f12368d499c07b91775aab53f95da66f1992c811d1a03b99687ed7", 0xf0, r3) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000a700000002540f66d0b6fd728f66a119759693f107dc0001a66da30f486dc006cb969de9ee4afcc07e6bba3590a572ef3aa49fb7a9b24011d67d698b2fe1f62956460b03e12dd31678fc5ace3bb19e9fcec810bef1c686a9b693de5b65abd2f1b3440364af62f7f29dbf3222d15e899970123be8fe592e0651193736de973392ef30ac0ca04ca1e745d3efe3ccc842de4dd054e78f68ca170dc67f2c2493a09c56ac256ec48b01"]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 19:36:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 19:36:34 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, 0x0) 19:36:34 executing program 2: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:34 executing program 1: epoll_create1(0x0) epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 19:36:34 executing program 0: r0 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000040)="06000000000000002f058182", 0xc, r0) r2 = getpgid(0x0) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000280)={0x7, {{0xa, 0x4e24, 0x59, @mcast1, 0x1ff}}, {{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xead}}}, 0x108) ptrace(0x37f128df9244c11e, r2) keyctl$update(0x2, r1, &(0x7f0000000180)="d5", 0x1) 19:36:34 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) 19:36:34 executing program 1: epoll_create1(0x0) epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 19:36:34 executing program 2: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1}) 19:36:34 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='8', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000180)="d5", 0x1) r1 = creat(&(0x7f0000000480)='./file0/file0\x00', 0x3) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) renameat2(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0/file0\x00', 0x3) openat$cgroup_int(r1, &(0x7f0000000240)='pids.max\x00', 0x2, 0x0) get_robust_list(r2, &(0x7f0000000140)=&(0x7f0000000100), &(0x7f00000001c0)=0x18) socketpair(0x8, 0x2, 0x1ff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000440)) lsetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000280)=@known='com.apple.FinderInfo\x00', &(0x7f0000000340)='syz', 0x3, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x80) 19:36:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="81", 0xfffffffffffffc7f, r0) keyctl$update(0x2, r1, &(0x7f0000000180)="d5", 0x1) 19:36:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) 19:36:34 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x1})