Warning: Permanently added '[localhost]:8965' (ECDSA) to the list of known hosts. 2020/07/05 14:26:45 fuzzer started 2020/07/05 14:26:45 dialing manager at 10.0.2.10:42611 2020/07/05 14:26:45 syscalls: 3100 2020/07/05 14:26:45 code coverage: enabled 2020/07/05 14:26:45 comparison tracing: enabled 2020/07/05 14:26:45 extra coverage: enabled 2020/07/05 14:26:45 setuid sandbox: enabled 2020/07/05 14:26:45 namespace sandbox: enabled 2020/07/05 14:26:45 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/05 14:26:45 fault injection: enabled 2020/07/05 14:26:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/05 14:26:45 net packet injection: enabled 2020/07/05 14:26:45 net device setup: enabled 2020/07/05 14:26:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/05 14:26:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/05 14:26:45 USB emulation: enabled 14:27:30 executing program 0: 14:27:30 executing program 1: 14:27:31 executing program 2: 14:27:31 executing program 3: syzkaller login: [ 226.338162][ T8562] IPVS: ftp: loaded support on port[0] = 21 [ 226.347546][ T8563] IPVS: ftp: loaded support on port[0] = 21 [ 226.408263][ T8565] IPVS: ftp: loaded support on port[0] = 21 [ 226.744966][ T8567] IPVS: ftp: loaded support on port[0] = 21 [ 226.940504][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 226.970847][ T8565] chnl_net:caif_netlink_parms(): no params data found [ 227.010995][ T8562] chnl_net:caif_netlink_parms(): no params data found [ 227.274853][ T8562] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.300620][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.322198][ T8562] device bridge_slave_0 entered promiscuous mode [ 227.369119][ T8562] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.392458][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.409588][ T8562] device bridge_slave_1 entered promiscuous mode [ 227.446833][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.471259][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.491653][ T8563] device bridge_slave_0 entered promiscuous mode [ 227.510780][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.523931][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.549439][ T8565] device bridge_slave_0 entered promiscuous mode [ 227.596737][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.620707][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.646393][ T8563] device bridge_slave_1 entered promiscuous mode [ 227.677571][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.694435][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.719340][ T8565] device bridge_slave_1 entered promiscuous mode [ 227.754080][ T8562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.809813][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.843901][ T8562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.890272][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.932296][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.984577][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.060213][ T8562] team0: Port device team_slave_0 added [ 228.096971][ T8567] chnl_net:caif_netlink_parms(): no params data found [ 228.140482][ T8562] team0: Port device team_slave_1 added [ 228.196967][ T8563] team0: Port device team_slave_0 added [ 228.219559][ T8565] team0: Port device team_slave_0 added [ 228.251517][ T8565] team0: Port device team_slave_1 added [ 228.278737][ T8563] team0: Port device team_slave_1 added [ 228.320760][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.334397][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.430454][ T8562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.460079][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.487585][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.558541][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.585956][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.603259][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.661008][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.693657][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.708893][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.767573][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.789536][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.802512][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.869011][ T8562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.907461][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.935848][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.997259][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.108836][ T8562] device hsr_slave_0 entered promiscuous mode [ 229.155700][ T8562] device hsr_slave_1 entered promiscuous mode [ 229.305751][ T8563] device hsr_slave_0 entered promiscuous mode [ 229.404361][ T8563] device hsr_slave_1 entered promiscuous mode [ 229.463714][ T8563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.509526][ T8563] Cannot create hsr debugfs directory [ 229.572287][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.600174][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.632531][ T8567] device bridge_slave_0 entered promiscuous mode [ 229.718468][ T8565] device hsr_slave_0 entered promiscuous mode [ 229.833699][ T8565] device hsr_slave_1 entered promiscuous mode [ 229.923279][ T8565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.937853][ T8565] Cannot create hsr debugfs directory [ 229.949075][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.962160][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.977017][ T8567] device bridge_slave_1 entered promiscuous mode [ 230.050910][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.108452][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.197210][ T8567] team0: Port device team_slave_0 added [ 230.236662][ T8567] team0: Port device team_slave_1 added [ 230.357653][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.376478][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.433216][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.461292][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.474751][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.532627][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.667668][ T8567] device hsr_slave_0 entered promiscuous mode [ 230.754009][ T8567] device hsr_slave_1 entered promiscuous mode [ 230.823392][ T8567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.858042][ T8567] Cannot create hsr debugfs directory [ 230.907278][ T8563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.065662][ T8563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.237505][ T8563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.316267][ T8563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.436497][ T8562] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.538702][ T8562] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.651170][ T8562] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.748256][ T8562] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.874071][ T8565] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.968194][ T8565] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.058496][ T8565] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 232.147705][ T8565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.258533][ T8567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.386000][ T8567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.483937][ T8567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.624251][ T8567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.838047][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.929467][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.976030][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.040707][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.105326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.152762][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.199847][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.244272][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.284561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.340222][ T8562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.388060][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.420444][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.444420][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.472061][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.510724][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.556914][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.597780][ T8567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.633792][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.676560][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.716622][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.759752][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.796208][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.830313][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.859819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.883819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.916699][ T8562] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.937952][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.965138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.995695][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.025861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.055188][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.071809][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.096026][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.116920][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.137949][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.161653][ T8567] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.185198][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.207862][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.232102][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.257058][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.285584][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.309415][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.328607][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.349790][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.376258][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.402648][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.426484][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.445465][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.459761][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.477014][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.497303][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.531949][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.558500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.577965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.598634][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.612586][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.628230][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.653980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.671554][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.686526][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.703439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.728283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.746752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.765692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.790531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.811981][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.828217][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.860102][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.880330][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.901596][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.921564][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.940349][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.958662][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.974777][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.999600][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.042076][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.070853][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.086567][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.102041][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.122718][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.142473][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.166749][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.199988][ T8562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.218611][ T8562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.233998][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.250714][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.265652][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.280692][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.294597][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.309852][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.326585][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.345530][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.379811][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.399278][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.423554][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.447585][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.488015][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.506060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.523946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.541301][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.556721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.574008][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.600082][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.624930][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.640445][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.671874][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.715444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.729962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.756171][ T8562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.775781][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.795758][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.811346][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.827294][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.852420][ T8563] device veth0_vlan entered promiscuous mode [ 235.865262][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.884831][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.913620][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.930261][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.952312][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.981430][ T8563] device veth1_vlan entered promiscuous mode [ 236.000003][ T8567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.030425][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.045856][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.061013][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.077239][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.118504][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.135837][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.150821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.173674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.204668][ T8565] device veth0_vlan entered promiscuous mode [ 236.228633][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.248361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.264086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.281864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.300283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.315969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.330477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.349838][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.366827][ T8562] device veth0_vlan entered promiscuous mode [ 236.390864][ T8563] device veth0_macvtap entered promiscuous mode [ 236.410744][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.426458][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.442647][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.458027][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.475284][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.492278][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.506136][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.524152][ T8565] device veth1_vlan entered promiscuous mode [ 236.544533][ T8563] device veth1_macvtap entered promiscuous mode [ 236.562470][ T8567] device veth0_vlan entered promiscuous mode [ 236.595409][ T8562] device veth1_vlan entered promiscuous mode [ 236.612756][ T8567] device veth1_vlan entered promiscuous mode [ 236.642544][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.664243][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.680899][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.698217][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.714821][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.736559][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.788854][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.843969][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.873855][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.895684][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.914750][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.946207][ T8562] device veth0_macvtap entered promiscuous mode [ 236.965332][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.984245][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.009739][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.035679][ T8565] device veth0_macvtap entered promiscuous mode [ 237.063956][ T8565] device veth1_macvtap entered promiscuous mode [ 237.086974][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.109959][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.126416][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.143426][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.245842][ T8567] device veth0_macvtap entered promiscuous mode [ 237.273563][ T8562] device veth1_macvtap entered promiscuous mode [ 237.296881][ T8567] device veth1_macvtap entered promiscuous mode [ 237.431583][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.457476][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.481576][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.507148][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 237.529362][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.553908][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.581661][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.615520][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.650411][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 237.650485][ T8563] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 237.680637][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.739485][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 237.793727][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.867797][ T8562] batman_adv: batadv0: Interface activated: batadv_slave_0 14:27:43 executing program 1: [ 237.922621][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 237.976224][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:27:43 executing program 1: [ 238.035378][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1 14:27:43 executing program 1: [ 238.089694][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.129696][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 14:27:43 executing program 1: [ 238.162044][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.199999][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.241998][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.287436][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.324523][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.365050][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.412105][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 238.454376][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.491423][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.517310][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.561950][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.591858][ T8562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.623263][ T8562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.653571][ T8562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.679302][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.700040][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.722245][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.749021][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.775212][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.798736][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.821194][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.843345][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.864212][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 238.886751][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.912032][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.936722][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.956578][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:27:44 executing program 0: 14:27:44 executing program 1: 14:27:44 executing program 3: 14:27:44 executing program 2: 14:27:44 executing program 1: 14:27:44 executing program 2: 14:27:44 executing program 3: 14:27:45 executing program 0: 14:27:45 executing program 2: 14:27:45 executing program 1: 14:27:45 executing program 3: 14:27:45 executing program 0: 14:27:45 executing program 2: 14:27:45 executing program 1: 14:27:45 executing program 2: 14:27:45 executing program 0: 14:27:45 executing program 3: 14:27:45 executing program 1: 14:27:45 executing program 0: 14:27:45 executing program 2: 14:27:45 executing program 1: 14:27:45 executing program 3: 14:27:46 executing program 0: 14:27:46 executing program 3: 14:27:46 executing program 2: 14:27:46 executing program 1: 14:27:46 executing program 0: 14:27:46 executing program 3: 14:27:46 executing program 2: 14:27:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='statm\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 14:27:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20008004) fcntl$setsig(r1, 0x406, 0x0) 14:27:46 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x5452, &(0x7f0000000000)={0xfdfdffff, {0x2, 0x0, @empty}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}}) 14:27:46 executing program 3: 14:27:46 executing program 2: 14:27:46 executing program 3: 14:27:46 executing program 0: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x3) poll(0x0, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/urandom\x00', 0x280, 0x0) signalfd4(r0, &(0x7f0000000b00), 0x8, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:27:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x43, 0x0, &(0x7f0000000000)) 14:27:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname(r3, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000300)=0x80) syncfs(r4) close(r1) ioctl$TCSETXF(r0, 0x5451, 0x0) 14:27:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') chroot(&(0x7f0000000040)='./file0\x00') 14:27:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 14:27:46 executing program 2: sync() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='./file0/file0\x00') r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 14:27:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)=@file={0x1, './file0/../file0\x00'}, 0x6e) 14:27:46 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:27:46 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, 0x0) 14:27:46 executing program 3: sync() mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 14:27:46 executing program 1: pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x40002, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) 14:27:47 executing program 2: r0 = socket(0x10, 0x2, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x400454ca, 0x0) 14:27:47 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x240801, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) 14:27:47 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x9, 0x0) signalfd4(r0, &(0x7f0000000100), 0x8, 0x0) sched_getscheduler(0x0) 14:27:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541b, &(0x7f0000000040)) 14:27:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400540, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) 14:27:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000540)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x0) 14:27:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') ioctl$TIOCSIG(r0, 0x5450, 0x0) 14:27:47 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) syncfs(r1) close(r2) ioctl$TUNSETLINK(r0, 0x5451, 0x0) 14:27:47 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 14:27:47 executing program 2: 14:27:47 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 14:27:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) sync() mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) readlinkat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) 14:27:47 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x5451, 0x0) 14:27:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) ioctl$TCSETSW2(r1, 0x5401, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "24194cec7fdbe019a58ece3b34fe3134840287"}) 14:27:47 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) [ 242.192683][ T8747] device vxlan0 entered promiscuous mode 14:27:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001a40)) 14:27:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000040)='./file0\x00') lsetxattr(&(0x7f0000000100)='./file0/file0\x00', 0x0, &(0x7f0000000180)='\'', 0x1, 0x0) 14:27:47 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 14:27:47 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup2(r1, r0) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:27:47 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5452, &(0x7f0000000080)) 14:27:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:47 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_to_batadv\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1]}, 0x8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @adiantum, 0x1, "d067a3c731b65744"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x3d, 0x9, 0x46}) openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x40, 0x0) 14:27:47 executing program 3: setrlimit(0x7, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) 14:27:47 executing program 1: sync() symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000500)='./file0/file1\x00', 0x0, &(0x7f0000000580)='y\x00', 0x2, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:27:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 14:27:47 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 14:27:47 executing program 0: creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+'}, 0x16, 0x7) 14:27:47 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001600)='/dev/zero\x00', 0x41, 0x0) write$P9_RREADDIR(r0, 0x0, 0x54) 14:27:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:47 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 14:27:47 executing program 0: sync() rename(0x0, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000240)=@v1={0x2, "287f5e50e3"}, 0x6, 0x1) 14:27:47 executing program 1: r0 = eventfd(0xfffffff8) r1 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) write$cgroup_int(r0, &(0x7f0000000040), 0x12) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 14:27:47 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 14:27:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000140)) 14:27:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001100)='/dev/zero\x00', 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) syncfs(r0) close(r1) ioctl$FITRIM(r0, 0x5450, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 14:27:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000140)) 14:27:47 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000a40)) 14:27:47 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 14:27:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 14:27:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000140)) 14:27:47 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) 14:27:47 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/urandom\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 14:27:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 14:27:47 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) 14:27:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5421, &(0x7f0000000300)) 14:27:47 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:47 executing program 1: r0 = eventfd(0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400040, 0x0) 14:27:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x402, 0x0) r1 = dup(r0) write$P9_RREMOVE(r1, 0x0, 0x0) 14:27:48 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(0xffffffffffffffff) 14:27:48 executing program 1: r0 = semget(0x2, 0x2, 0x523) pipe2(&(0x7f00000016c0)={0xffffffffffffffff}, 0x0) r2 = socket$unix(0x1, 0x200000000000002, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) dup3(r2, r1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x43, 0x0, &(0x7f0000000080)) r3 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x200, 0x29) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup2(0xffffffffffffffff, r4) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000040)={0x0, 0x7, 0x3}) 14:27:48 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x5451, 0x0) 14:27:48 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(0xffffffffffffffff) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 1: r0 = semget(0x2, 0x2, 0x523) pipe2(&(0x7f00000016c0)={0xffffffffffffffff}, 0x0) r2 = socket$unix(0x1, 0x200000000000002, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) dup3(r2, r1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x43, 0x0, &(0x7f0000000080)) r3 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x200, 0x29) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup2(0xffffffffffffffff, r4) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000040)={0x0, 0x7, 0x3}) 14:27:48 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(0xffffffffffffffff) 14:27:48 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x5451, 0x0) 14:27:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 14:27:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup(r1) r3 = dup(r2) dup2(r0, r3) write$P9_RFSYNC(r3, 0x0, 0x0) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) 14:27:48 executing program 1: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 0: r0 = eventfd(0xfffffffffffffffc) r1 = dup(r0) write$P9_RLOCK(r1, &(0x7f0000000000)={0x8}, 0x8) read$char_usb(r1, &(0x7f0000000000)=""/16, 0x10) 14:27:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 3: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) 14:27:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x5451) 14:27:48 executing program 3: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) 14:27:48 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/urandom\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, 0x0) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 3: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) 14:27:48 executing program 0: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 14:27:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TIOCVHANGUP(r1, 0x541b, 0x713000) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 0: rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200010a) 14:27:48 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$KDMKTONE(r0, 0x541b, 0x0) 14:27:48 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x200003, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000140)) 14:27:48 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(r0) 14:27:48 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(r0) 14:27:48 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfffffca1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14:27:48 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x4282, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) 14:27:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) 14:27:48 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000000), 0x2, 0x0) 14:27:49 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(r0) 14:27:49 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) 14:27:49 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(0xffffffffffffffff) 14:27:49 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5452, &(0x7f0000000200)) 14:27:49 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(0xffffffffffffffff) 14:27:49 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x3, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 14:27:49 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfffffca1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14:27:49 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfffffca1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14:27:49 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(0xffffffffffffffff) 14:27:49 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x720403, 0x0) write$char_usb(r0, 0x0, 0x0) 14:27:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) syncfs(r0) close(r2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x5450) keyctl$read(0xb, 0x0, 0x0, 0x0) 14:27:49 executing program 3: sync() mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xa500, 0x80) 14:27:49 executing program 2: socketpair(0x6, 0x4, 0x96, &(0x7f0000000040)) fchdir(0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x4640, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) r0 = open(&(0x7f0000000500)='./file1\x00', 0x142, 0x0) fchown(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sync() lgetxattr(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)=@random={'user.', '/dev/full\x00'}, &(0x7f0000001d80)=""/118, 0x76) 14:27:49 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) [ 244.533369][ T9004] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /syz-fuzzer /syz-executor.0 proc:/self/fd/3' not defined. 14:27:49 executing program 1: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) shmget(0x0, 0x1000, 0xc2, &(0x7f0000ffe000/0x1000)=nil) 14:27:49 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001140)='/dev/urandom\x00', 0x200a02, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 14:27:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 14:27:49 executing program 2: socketpair(0x6, 0x4, 0x96, &(0x7f0000000040)) fchdir(0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x4640, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) r0 = open(&(0x7f0000000500)='./file1\x00', 0x142, 0x0) fchown(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sync() lgetxattr(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)=@random={'user.', '/dev/full\x00'}, &(0x7f0000001d80)=""/118, 0x76) 14:27:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x100343, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 14:27:49 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{}, "01d496ea3962c6e3", "e7c8501e144ba3ccedf634c09884f970", "93a9039b", "9b4c4ac72626fa0f"}, 0x28) 14:27:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x101002, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 14:27:49 executing program 2: sync() openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x6200c2, 0x0) 14:27:49 executing program 3: sync() symlink(&(0x7f0000000040)='./file2\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file2\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file2\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 14:27:49 executing program 0: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 14:27:50 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x60c143, 0x0) mount(&(0x7f0000000600)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) sync() rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file1\x00') lsetxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', 0x0, 0x0, 0x0) 14:27:50 executing program 2: sync() openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x6200c2, 0x0) 14:27:50 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x5452, &(0x7f00000000c0)) 14:27:50 executing program 3: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce\x00\x00\x00\x00\xc9\xad\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87j\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\x00\x00\xb7\xd6\xa5&);\x1br\xd2\xa4\xba\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca\xa3\x1c]<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f;A Y\x84\x17\x14\xa8\xb5\x0f\xc3i\x9a\x87W\x90h.\x8b\xf5\xf9\xc1\xf04\x9a\xf9DB|L\xbc^n\xd5\x85\xd7\xaf-}\xce\x0e\xcc{\xb1\x9d_\xb2BmU\xc2\xad2q\xd5t&v\x89O\xf0+Q?\xf5\x1eV\x8d[\x98\x11\f#\x13\xc7\xd9\x92\xcc\xf7\xfb\xd3\bGy\x98\x1b\xe7\x86i\xe1.\x1f\x9e\x8cPFYi\x94\x13\xddm\x9c\xbfV\xe7^@\xe0\xa3\xa5(\f\x18>94\xedZ\xa7\xe4\xb2\xb6.\bY\xa9\xff\xbb', 0x0) pwrite64(r0, &(0x7f0000000080)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') readlink(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 14:27:50 executing program 0: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 14:27:50 executing program 1: r0 = eventfd(0xfb7bfffa) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf}, 0xf) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e62, @dev}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 14:27:50 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) dup3(r0, r1, 0x0) 14:27:50 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000840)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5451, 0x0) 14:27:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 14:27:50 executing program 3: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = getpgid(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000240)) 14:27:50 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40081, 0x0) write$P9_RSTAT(r0, 0x0, 0x0) 14:27:50 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) 14:27:50 executing program 1: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f00000006c0)="2fa3", 0x2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syncfs(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) 14:27:50 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5452, &(0x7f0000000000)) 14:27:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004c40)='/dev/full\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5451, 0x0) 14:27:50 executing program 2: semget(0x2, 0x3, 0x2c6) 14:27:50 executing program 0: creat(&(0x7f0000000140)='./file0\x00', 0x0) lchown(&(0x7f00000008c0)='./file0/file0\x00', 0x0, 0x0) 14:27:50 executing program 1: sync() rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file2\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 14:27:50 executing program 3: sync() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7) 14:27:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce\x00\x00\x00\x00\xc9\xad\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87j\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\x00\x00\xb7\xd6\xa5&);\x1br\xd2\xa4\xba\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca\xa3\x1c]<\x04\xaf\x04\x9a\x9d\x84D\a\x00\x00F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f;A Y\x84\x17\x14\xa8\xb5\x0f\xc3i\x9a\x87W\x90h.\x8b\xf5\xf9\xc1\xf04\x9a\xf9DB|L\xbc^n\xd5\x85\xd7\xaf-}\xce\x0e\xcc{\xb1\x9d_\xb2BmU\xc2\xad2q\xd5t&v\x89O\xf0+Q?\xf5\x1eV\x8d[\x98\x11\f#\x13\xc7\\3=\xd6\x00\x11\x9d\xca\x9d\xd9\x92\xcc\xf7\xfb\xd3\bGy\x98\x1b\xe7\x86i\xe1.\x1f\x9e\x8cPFYi\x94\x13\xddm\x9c\xbfV\xe7^@\xe0\xa3\xa5(\f\x18>94\xedZ\xa7\xe4\xb2\xb6.\bY\xa9\xff\xbb', 0x0) pwrite64(r0, &(0x7f00000006c0)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00') r1 = socket$unix(0x1, 0x1, 0x0) syncfs(r1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 14:27:50 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/zero\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) getsockopt$inet6_mtu(r0, 0x29, 0x43, 0x0, &(0x7f00000000c0)) 14:27:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:50 executing program 1: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) write$P9_RMKDIR(r1, 0x0, 0x0) 14:27:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/full\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c40)) getpeername$netlink(r0, 0x0, &(0x7f0000000080)) 14:27:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce\x00\x00\x00\x00\xc9\xad\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87j\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\x00\x00\xb7\xd6\xa5&);\x1br\xd2\xa4\xba\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca\xa3\x1c]<\x04\xaf\x04\x9a\x9d\x84D\a\x00\x00F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f;A Y\x84\x17\x14\xa8\xb5\x0f\xc3i\x9a\x87W\x90h.\x8b\xf5\xf9\xc1\xf04\x9a\xf9DB|L\xbc^n\xd5\x85\xd7\xaf-}\xce\x0e\xcc{\xb1\x9d_\xb2BmU\xc2\xad2q\xd5t&v\x89O\xf0+Q?\xf5\x1eV\x8d[\x98\x11\f#\x13\xc7\\3=\xd6\x00\x11\x9d\xca\x9d\xd9\x92\xcc\xf7\xfb\xd3\bGy\x98\x1b\xe7\x86i\xe1.\x1f\x9e\x8cPFYi\x94\x13\xddm\x9c\xbfV\xe7^@\xe0\xa3\xa5(\f\x18>94\xedZ\xa7\xe4\xb2\xb6.\bY\xa9\xff\xbb', 0x0) pwrite64(r0, &(0x7f00000006c0)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00') r1 = socket$unix(0x1, 0x1, 0x0) syncfs(r1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 14:27:50 executing program 1: sync() open(&(0x7f00000010c0)='./file0\x00', 0x412440, 0x0) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file2\x00') chroot(&(0x7f0000000040)='./file2\x00') 14:27:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:50 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x40301, 0x0) write$P9_RFSYNC(r0, 0x0, 0x0) 14:27:50 executing program 0: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00'}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) signalfd(r0, &(0x7f0000000480), 0x8) 14:27:50 executing program 3: r0 = eventfd(0xfffffffffffffffc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x0, 'pids'}, {0x0, 'rdma'}]}, 0xc) read$eventfd(r0, &(0x7f0000000040), 0x8) 14:27:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:50 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) sync() rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000340)='./file1\x00') lsetxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='security.ima\x00', 0x0, 0x0, 0x0) 14:27:50 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = eventfd(0xfffffffc) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RSTATFS(r2, &(0x7f0000000080)={0x43}, 0x43) close(r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 14:27:50 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x414341, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 14:27:50 executing program 2: ioctl$TCSETAF(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$PIO_FONT(r1, 0x5450, 0x0) 14:27:51 executing program 1: mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x2) 14:27:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000007240)='/dev/ptmx\x00', 0x0, 0x0) flock(r0, 0xc) 14:27:51 executing program 3: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) 14:27:51 executing program 2: ioctl$TCSETAF(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000007) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) 14:27:51 executing program 0: sync() openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') llistxattr(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 14:27:51 executing program 2: ioctl$TCSETAF(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:51 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5450, 0x0) 14:27:51 executing program 3: creat(&(0x7f0000000000)='./file1\x00', 0x0) sync() rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000540)='./file1\x00') setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', 0x0, 0xfffffffffffffc54, 0x0) 14:27:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:51 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = dup2(r0, r1) openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 14:27:51 executing program 0: r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) sync() rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file2\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file2\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0xba6fe165a9366b07, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f00000000c0)) 14:27:51 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:51 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5414, 0x20000004) splice(r3, 0x0, r5, 0x0, 0x0, 0x0) 14:27:51 executing program 3: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f00000006c0)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000100)='./file0/file0\x00') 14:27:51 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:51 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/null\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 14:27:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x5452, &(0x7f0000000080)) 14:27:51 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:51 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9815c78b023df00e"}) 14:27:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000004dc0)) 14:27:52 executing program 1: r0 = eventfd(0xfbfffff8) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00000002c0)) r1 = fcntl$dupfd(r0, 0x0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x6, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, r4+10000000}}, 0x0) 14:27:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, 0x0) 14:27:52 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:52 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 14:27:52 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) r2 = dup(r0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x541b, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 14:27:52 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, 0x0) 14:27:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5403, 0x0) 14:27:52 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0) syncfs(r0) close(r0) setrlimit(0x7, &(0x7f0000000080)={0x3, 0x6a}) socket(0xa, 0x2, 0x0) 14:27:52 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:52 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) 14:27:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) syncfs(r1) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000000)='./file0\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 14:27:52 executing program 3: fchownat(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:52 executing program 2: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e62, @dev}, 0x10) write$P9_RRENAME(r1, 0x0, 0x0) 14:27:52 executing program 3: fchownat(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:53 executing program 0: sync() mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=@random={'user.', 'j\x80\xe5\xd5\xd8\x15\xff\x8d 5\xf0^\xf8\b|\xe3/\x9e\xb9\xc0\x85\xa1\x15M\t\xc0j\xb8\x04F\xc4MKt\xcf\xaa\xac \xd2%!\xaamJ\xdf\x02\x00Y=\xc7\xbb\x91\x12\xde\xefr\xb9y\xc8\xc4\xd3\xad\x9f\xe0\xd3\x88R\x82\xbf5\xc1d\x158\xc8\"\xa0\xb1\xc4\x89\xb9\x91\xeb\xae]\xd4\xb8\xe1`\xfc\xc8?\x12fy\xde\xb1u\x94\xef\xc3\x84s\xa2\xb0Qg\xa1sp\xa0\xbaH 3\x8e\x8d\xd1\xf9\xe9=\xd6x\x8d\xa6\xcf\xcb=}0\xa6\x00\x00\x00\x00\x00'}) 14:27:53 executing program 3: fchownat(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:53 executing program 2: sync() symlink(&(0x7f0000000080)='./file2/file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0) 14:27:53 executing program 1: setrlimit(0x7, &(0x7f0000000040)={0x0, 0x6b}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x80500, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) 14:27:53 executing program 1: sync() mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4) 14:27:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:53 executing program 0: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 14:27:53 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) 14:27:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x5451, 0x0) 14:27:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:53 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)) 14:27:53 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x200840, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x3, 0x6a}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x8000, 0x0) 14:27:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:53 executing program 0: r0 = eventfd(0x0) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) write$P9_RREMOVE(r2, 0x0, 0x0) 14:27:53 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:53 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x5421, 0x743000) 14:27:53 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x5421, &(0x7f0000000000)) 14:27:53 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) close(r1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5451, 0x0) 14:27:53 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:53 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x0, 0x0) sync() close(r0) socketpair(0x1, 0x5, 0x0, 0x0) 14:27:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xb, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x6) 14:27:53 executing program 0: creat(&(0x7f00000005c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sync() rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 14:27:53 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x1000) 14:27:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, 0x0, 0xee01, 0x0, 0x1000) 14:27:53 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002800)='/dev/full\x00', 0xa0003, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) 14:27:53 executing program 2: creat(&(0x7f00000005c0)='./file0\x00', 0x0) mount(&(0x7f0000000600)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) sync() rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x30319d3bc2bc2635) 14:27:53 executing program 1: sync() rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') removexattr(&(0x7f0000000080)='./file0\x00', 0x0) 14:27:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, 0x0, 0xee01, 0x0, 0x1000) 14:27:53 executing program 0: creat(&(0x7f00000005c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sync() rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 14:27:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, 0x0, 0xee01, 0x0, 0x1000) 14:27:53 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5451, 0x0) 14:27:53 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 14:27:53 executing program 1: sync() rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') removexattr(&(0x7f0000000080)='./file0\x00', 0x0) 14:27:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x0) 14:27:53 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5421, &(0x7f0000000040)={0x6, 'veth0_to_bond\x00'}) 14:27:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x5452, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}) 14:27:54 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x0) 14:27:54 executing program 1: r0 = gettid() pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x0, 0x0) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) dup2(r3, r2) splice(r3, 0x0, r1, 0x0, 0x55aa40be, 0x0) r5 = dup(r1) ioctl$VT_ACTIVATE(r5, 0x541b, 0x0) tkill(r0, 0xd) 14:27:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCGICOUNT(r1, 0x541b, 0x719000) 14:27:54 executing program 0: r0 = socket(0x84000000000a, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) write$P9_RUNLINKAT(r1, 0x0, 0x0) shutdown(r0, 0x0) 14:27:54 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000380)='\x00', 0xee01, 0x0, 0x0) 14:27:54 executing program 1: r0 = socket(0x84000000000a, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0) 14:27:54 executing program 2: open(&(0x7f0000000340)='./file0\x00', 0x143042, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) 14:27:54 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x5450, 0x0) 14:27:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 14:27:54 executing program 3: r0 = gettid() pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14}, 0x14) close(r1) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x13) 14:27:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454ca, &(0x7f0000000000)) 14:27:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001b80)={&(0x7f0000000880)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0) 14:27:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$FIONCLEX(r1, 0x5450) 14:27:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x12, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syncfs(r1) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') r3 = socket$unix(0x1, 0x1, 0x0) dup2(r3, r2) ioctl$TUNSETQUEUE(r1, 0x5451, 0x0) 14:27:54 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8901, &(0x7f00000000c0)={'vxcan1\x00'}) 14:27:54 executing program 1: sync() mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00') removexattr(&(0x7f0000000080)='./file1\x00', 0x0) 14:27:54 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RREAD(r1, &(0x7f0000000200)={0xb}, 0xb) close(r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$unix(0x1, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x1000000000016) 14:27:54 executing program 3: rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file2\x00') lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x2) 14:27:54 executing program 1: sync() open(&(0x7f00000010c0)='./file0\x00', 0x412440, 0x0) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file2\x00') 14:27:54 executing program 3: symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') readlink(&(0x7f0000000140)='./file2/file1\x00', &(0x7f0000000100)=""/31, 0x1f) 14:27:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5401, 0x0) 14:27:55 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x60c143, 0x0) mount(&(0x7f0000000600)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x200081, 0x0) sync() setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x3) 14:27:55 executing program 0: sync() symlink(&(0x7f0000000080)='./file2/file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') setxattr(&(0x7f0000000100)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0) 14:27:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$sock_int(r1, 0x1, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 14:27:55 executing program 1: open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sync() rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file2/file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 14:27:55 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 14:27:55 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x60c143, 0x0) mount(&(0x7f0000000600)=ANY=[], &(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x200081, 0x0) sync() setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x3) 14:27:55 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)) 14:27:55 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20002, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 14:27:55 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f94b10976f7622df2d2f42387063c6bee7b1de"}) 14:27:55 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) getsockname$inet(r0, 0x0, &(0x7f00000000c0)) 14:27:55 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 14:27:55 executing program 1: r0 = eventfd(0xdffffffe) write$P9_ROPEN(r0, &(0x7f00000007c0)={0x18}, 0xfffffe35) r1 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5450, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) close(r0) r2 = eventfd(0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x13) fsetxattr$security_evm(r4, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) 14:27:55 executing program 3: sync() mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00') r0 = socket$unix(0x1, 0x1, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) lsetxattr$security_ima(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='security.ima\x00', 0x0, 0x0, 0x0) 14:27:55 executing program 2: sync() mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', 0x0, 0xffffffffffffffed, 0x0) 14:27:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) syncfs(r1) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000000)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = dup3(r0, r2, 0x0) faccessat(r3, &(0x7f0000000040)='./file0\x00', 0x0) 14:27:55 executing program 1: sync() rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x1) 14:27:55 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/zero\x00', 0x0, 0x0) syncfs(r0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001540)='/proc/thread-self\x00', 0x202, 0x0) 14:27:55 executing program 3: pipe(&(0x7f0000002b00)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) 14:27:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x5401, 0x0) 14:27:55 executing program 2: sync() rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000d000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=@file={0x1, '.\x00'}, 0x6e, 0x0}], 0x1, 0x0) 14:27:55 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) openat(r0, &(0x7f0000000080)='/', 0x0, 0x0) 14:27:55 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup3(r0, r1, 0x0) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 14:27:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000100)='./file0\x00') sync() rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') umount2(&(0x7f0000000040)='./file2\x00', 0x0) 14:27:55 executing program 1: creat(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0xdf5e541a76100a20) 14:27:55 executing program 2: mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) 14:27:55 executing program 3: symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000400)='./file1\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 14:27:55 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) sync() rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0xfffffe5d, 0x0) 14:27:55 executing program 1: sync() rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') symlinkat(&(0x7f0000000200)='/', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:27:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000180)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) dup3(r0, r2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000040)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e20, @dev}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 14:27:55 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x740801, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) 14:27:55 executing program 2: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) write$P9_RAUTH(r1, 0x0, 0x0) 14:27:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) 14:27:55 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000640)='/dev/urandom\x00', 0x0, 0x0) fcntl$notify(r0, 0x0, 0x0) 14:27:55 executing program 2: symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file2\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x4) 14:27:55 executing program 1: symlink(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)='./file2\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x0) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') 14:27:55 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) close(r1) recvmsg(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x5450, 0x0) 14:27:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = ioctl$NS_GET_PARENT(r0, 0x541b, 0x73b000) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) rmdir(&(0x7f0000000080)='./file2\x00') 14:27:56 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_procs(r0, &(0x7f0000000000), 0x2, 0x0) 14:27:56 executing program 1: open(&(0x7f0000000140)='./file0\x00', 0x235040, 0x0) readlink(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 14:27:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000005) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 14:27:56 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000000080)={0x12b4, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x88}, @nested={0x11a4}, @generic="dbfed5181f66c08d94e9", @generic="c1de1722d976418867299bfacaec8fcaea310b547f9eccf33ad118ef7a92a027cb67b3143d528427c7676c40ed363478cab978f5053a99fd80933e651ebbb95ddd74f07afb8c25883d514090cce3b943af764e5b060d7944b9a786fd4bd66852e9f7530f54ab3808c72bb6"]}, 0x12b4}, {&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x12f8}, {&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1a58}], 0x3}, 0x0) sendmsg$netlink(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000000380)={0x10}, 0x10}], 0x1}, 0x0) shutdown(r0, 0x1) 14:27:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x5e22, @remote}, 0x10) write$binfmt_aout(r0, 0x0, 0x883) 14:27:56 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0xa8082, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 14:27:56 executing program 0: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f00000006c0)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syncfs(r0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 14:27:56 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000000)={0x3, 'tunl0\x00'}) 14:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x541b, &(0x7f0000000140)) 14:27:56 executing program 1: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) write$P9_RSTATFS(r1, 0x0, 0x0) 14:27:56 executing program 2: sync() mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000001140)='./file0\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 14:27:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', @random="73fe1dbe7c36"}) 14:27:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000040)) 14:27:56 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 14:27:56 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x101c01, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 14:27:56 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x5450, 0x0) 14:27:56 executing program 3: rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) 14:27:56 executing program 0: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') 14:27:56 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x5451, r1) 14:27:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8082, 0x0) writev(r0, 0x0, 0x0) 14:27:56 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') openat$cgroup_procs(r0, &(0x7f0000000000), 0x2, 0x0) 14:27:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003900)={&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 14:27:56 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) listen(r1, 0x0) 14:27:56 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x5451, 0x0) 14:27:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) syncfs(r1) close(r1) ioctl$sock_SIOCDELRT(r0, 0x5450, 0x0) 14:27:56 executing program 0: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') 14:27:56 executing program 2: r0 = epoll_create1(0x0) epoll_wait(r0, 0x0, 0x0, 0x6164) 14:27:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_FONT(r0, 0x5450, 0x0) 14:27:56 executing program 3: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) write$cgroup_type(r1, 0x0, 0x0) 14:27:56 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r1, r0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 14:27:56 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x5450) 14:27:56 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 14:27:56 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 14:27:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000000)='./file0\x00') syncfs(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000140)='./file0/file1/file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) 14:27:56 executing program 0: sync() rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:27:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) 14:27:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) 14:27:57 executing program 1: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000100)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syncfs(r0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 14:27:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x52000152) 14:27:57 executing program 0: sync() syz_open_dev$tty1(0xc, 0x4, 0x1) 14:27:57 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 14:27:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101983, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 14:27:57 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) removexattr(&(0x7f0000000040)='./file0/file0\x00', 0x0) 14:27:57 executing program 1: timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r0 = eventfd(0xfffffffe) r1 = dup(r0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000001"], 0x20) close(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x424342, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x13) 14:27:57 executing program 0: sync() syz_open_dev$tty1(0xc, 0x4, 0x1) 14:27:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000000)='./file0\x00') faccessat(r0, &(0x7f0000000100)='./file0/file1/file0\x00', 0x0) 14:27:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0) syncfs(r1) close(r1) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x5450, 0x0) 14:27:57 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7}, 0x7) close(r1) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) 14:27:57 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) write$P9_RREADDIR(r1, 0x0, 0x0) 14:27:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x5452, 0x0) 14:27:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, 0x0, 0x0) 14:27:57 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacvd\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f\xc8\v~R\xffp{\xf6\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94JXNr\xa0\x88\xfa8\xf4\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\t\x00\r\x98\x06/\x9a%m\xe8\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12\x00'/293, 0x0) pwrite64(r0, &(0x7f0000000280)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sync() statfs(&(0x7f0000000080)='./file0/file0\x00', 0x0) 14:27:57 executing program 3: r0 = eventfd(0xfbfffff8) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43}, 0x43) close(r1) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 14:27:57 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x5451, 0x0) 14:27:57 executing program 2: socketpair(0x1, 0x80005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$TIOCVHANGUP(r1, 0x541b, 0x713000) 14:27:57 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000640)='/dev/urandom\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 14:27:57 executing program 3: r0 = eventfd(0xfbfffff8) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43}, 0x43) close(r1) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 14:27:57 executing program 2: sync() setrlimit(0x7, &(0x7f0000000680)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 14:27:57 executing program 1: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "c04e47724997b288", "d4c9c9ebdd46102b7c0ae869284f3583d137d3eb72a32b0cb0f54180b7261c7d", "21bf76fd", "000000040000ff00"}, 0x38) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:27:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:27:57 executing program 3: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$TUNSETTXFILTER(r0, 0x5451, 0x0) 14:27:57 executing program 0: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) write$P9_ROPEN(r1, 0x0, 0x0) 14:27:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 14:27:57 executing program 2: sync() rename(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) dup3(r0, r2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, 0x0) 14:27:57 executing program 0: r0 = semget(0x0, 0x0, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/205) 14:27:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0) syncfs(r1) close(r1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, 0x0) 14:27:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) write$binfmt_elf32(r0, 0x0, 0x0) 14:27:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x5452, &(0x7f0000000040)={'ip6erspan0\x00'}) 14:27:57 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x1, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 14:27:57 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) write$P9_RLOCK(r0, 0x0, 0x55) 14:27:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 2: sync() openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000100)='./file0\x00') setxattr$security_ima(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0xd, 0x0) 14:27:57 executing program 0: times(0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000c00)=@ccm_128={{0x303}, "e901adba486298b0", "7afbc89ddd987fdf23fbe90a327f587e", "ec1dcd2a", "5403d09013de0ce2"}, 0x28) signalfd4(r0, &(0x7f0000000c40)={[0x100000000]}, 0x8, 0x80000) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e8, &(0x7f0000001d80)="0f9443ee82839c4fb16fd6fb1a9a422a1bdb2646be9ed62e0d6bfc561ba80213bc6716961604aef667a448e78579861451b37f011b8657ca611b6cb39a06d10477dce93a506434dd91999fe824cb8f4dcf400fbb1ed53728edae1e8086aaab0b4067063ac5732746473a5ff5dbfc5d63e70b68e94b8a10d86c2f585c8324e1afb1a7485b23b6e33bd770d8c0d7c17a1052e57c831a373a1034ef25927c59542785d65eb5c727af2845d7f23f4857f6f967b77ef947caae37d839cfd528e0c02b0aad7872da306d5fc2b739af") 14:27:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) dup2(r0, r1) fsync(r1) 14:27:57 executing program 1: statx(0xffffffffffffffff, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) 14:27:57 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) 14:27:57 executing program 1: statx(0xffffffffffffffff, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 2: sync() openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000100)='./file0\x00') setxattr$security_ima(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0xd, 0x0) 14:27:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup2(r1, r0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 14:27:57 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 14:27:57 executing program 1: statx(0xffffffffffffffff, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = epoll_create1(0x80000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = semget$private(0x0, 0x1, 0x85) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, r3, r4, r5, r6}, 0x7, 0x400ffff, 0x2, 0x3d, 0x0, 0x0, 0x200}) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f00000001c0)=""/71) r7 = timerfd_create(0x0, 0x0) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r9 = timerfd_create(0x0, 0x0) dup3(r8, r9, 0x0) write$P9_RLINK(r9, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000000140)={0x0, 0x101, 0x6, 0x3ff, 0x8000}) dup3(r0, r7, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'virt_wifi0\x00', @ifru_map={0xffffffffffffffe1, 0x200, 0x3, 0x0, 0x8, 0x80}}}) 14:27:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 14:27:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 2: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000740)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/softnet_stat\x00') setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) pipe2(0x0, 0x0) memfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) rmdir(&(0x7f0000000900)='./file0\x00') 14:27:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$KDSKBLED(r2, 0x5401, 0x0) 14:27:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) fcntl$addseals(r0, 0x2, 0x0) 14:27:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000dc0)) 14:27:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) fstatfs(r1, &(0x7f0000000380)=""/238) 14:27:57 executing program 1: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$PIO_FONTRESET(r1, 0x541b, 0x717000) 14:27:57 executing program 0: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) 14:27:57 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:57 executing program 3: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x0) 14:27:57 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x0, 0x0) fcntl$lock(r0, 0x0, 0x0) 14:27:57 executing program 0: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') execveat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) 14:27:57 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:58 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) 14:27:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) 14:27:58 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) syncfs(r0) close(r0) setrlimit(0x7, &(0x7f0000000080)={0x3, 0x6a}) socket$unix(0x1, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14:27:58 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000003c40)='\x00', 0x1000, 0x0, &(0x7f0000000640)) 14:27:58 executing program 2: sync() mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0x8c, 0x0) 14:27:58 executing program 0: sync() openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) setrlimit(0x7, &(0x7f0000000500)) 14:27:58 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x202302, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) 14:27:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000000640)) 14:27:58 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:27:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000000640)) 14:27:58 executing program 2: sync() mkdir(&(0x7f0000001080)='./file0\x00', 0x0) rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0x8c, 0x0) 14:27:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup3(r2, r3, 0x0) syncfs(r4) close(r1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0) 14:27:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) fcntl$setlease(r1, 0x406, 0x0) 14:27:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) 14:27:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000000640)) 14:27:58 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{}, "930986363707ee00", "77261d98a5187fd93eb5a0e0306f15de7c8bbdb5508fb4d9f99216f79acd634f", "b2ef1477", "f7a9babfd83a2efc"}, 0x38) 14:27:58 executing program 0: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) dup3(r1, r3, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, 0x0) 14:27:58 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0) syncfs(r0) close(r0) setrlimit(0x7, &(0x7f0000000080)={0x3, 0x6a}) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) 14:27:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x0, 0x0, &(0x7f0000000640)) 14:27:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x5452, 0x71dffe) 14:27:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) rename(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000001140)='./file0\x00') bind(r0, &(0x7f0000000240)=@ethernet={0x1, @dev}, 0x43) getpeername$unix(r0, 0x0, 0x0) 14:27:58 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) fchown(r1, 0x0, 0x0) 14:27:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x0, 0x0, &(0x7f0000000640)) 14:27:58 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x5451, 0x0) 14:27:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x0, 0x0, &(0x7f0000000640)) 14:27:58 executing program 2: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) getpgid(r1) pwrite64(r0, &(0x7f00000006c0)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101100, 0x101) 14:27:58 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 14:27:58 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 14:27:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, 0x0) 14:27:58 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x6, 0x0) r2 = dup2(r1, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RGETATTR(r2, 0x0, 0x0) r3 = open(&(0x7f0000000140)='.\x00', 0x143042, 0x0) dup2(r3, r1) tkill(r0, 0x1000000000016) 14:27:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x5452, &(0x7f0000000040)) 14:27:58 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x141002, 0x0) write$P9_RRENAME(r0, 0x0, 0x0) 14:27:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, 0x0) 14:27:58 executing program 0: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\t\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9\x93R\x81\xe4N\b*Yv\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xa4Df\xf4\xc5\xaf\xf7\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa,-\xf3\x1c\xdd\x1d\xfcL\xfe\xa9\xe1\x9f\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\x00<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x01`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\x1a^w\xb20\xde\xc4\xa8\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0\x00') 14:27:58 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') 14:27:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) statx(r0, &(0x7f0000003c40)='\x00', 0x1000, 0x0, 0x0) 14:27:58 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) 14:27:58 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x1) 14:27:58 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syncfs(r0) 14:27:58 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x400015) 14:27:58 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 14:27:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "6dee771a6956213b4a1764c07b933da1d9099d"}) 14:27:58 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x103002, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) 14:27:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20000004) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 14:27:58 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 14:27:58 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5450, 0x0) 14:27:58 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self\x00', 0x0, 0x0) syncfs(r0) close(r0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) 14:27:58 executing program 0: r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) dup2(r2, r1) write$9p(r1, 0x0, 0x0) 14:27:58 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 14:27:58 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) dup2(r0, r1) getpeername(r0, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) accept4$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000) rt_sigreturn() 14:27:58 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 14:27:58 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5450, 0x0) 14:27:58 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) [ 254.052849][ C1] traps: PANIC: double fault, error_code: 0x0 [ 254.052849][ C1] double fault: 0000 [#1] PREEMPT SMP KASAN [ 254.052849][ C1] CPU: 1 PID: 9967 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 254.052849][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 254.052849][ C1] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 254.052849][ C1] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 254.052849][ C1] RSP: 0018:fffffe0000036fb8 EFLAGS: 00010086 [ 254.052849][ C1] RAX: 00000000f5dc5b40 RBX: fffffe0000036fb8 RCX: ffffffff88000e87 [ 254.052849][ C1] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 254.052849][ C1] RBP: fffffe0000037120 R08: 0000000000000000 R09: 0000000000000000 [ 254.052849][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 254.052849][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.052849][ C1] FS: 0000000000000000(0003) GS:ffff88802cf00000(0000) knlGS:0000000000000000 [ 254.052849][ C1] CS: 0010 DS: 0000 ES: 0003 CR0: 0000000080050033 [ 254.052849][ C1] CR2: fffffe0000036fa8 CR3: 000000006047f000 CR4: 0000000000340ee0 [ 254.052849][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.052849][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.052849][ C1] Call Trace: [ 254.052849][ C1] [ 254.052849][ C1] error_entry+0xb8/0xc0 [ 254.052849][ C1] RIP: 0010:native_irq_return_iret+0x0/0x2 [ 254.052849][ C1] Code: 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 08 e9 10 00 00 00 90 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 f6 44 24 20 04 75 02 <48> cf 57 0f 01 f8 0f 1f 00 65 48 8b 3c 25 00 90 01 00 48 89 07 48 [ 254.052849][ C1] RSP: 0018:fffffe00000371d8 EFLAGS: 00010046 ORIG_RAX: 0000000000000f00 [ 254.052849][ C1] RAX: 00000000f5dc5b40 RBX: 00000000080590d0 RCX: 00000000f5dc5b40 [ 254.052849][ C1] RDX: 000000000817af60 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.052849][ C1] RBP: 00000000003d0f00 R08: 0000000000000000 R09: 0000000000000000 [ 254.052849][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 254.052849][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.052849][ C1] ? asm_exc_general_protection+0x8/0x30 [ 254.052849][ C1] RIP: 0f03:0x0 [ 254.052849][ C1] Code: Bad RIP value. [ 254.052849][ C1] RSP: 8713:00000000f5dc5228 EFLAGS: 00040202 [ 254.052849][ C1] Modules linked in: [ 254.783146][ C1] ---[ end trace fddf3000e8a98e7a ]--- [ 254.783146][ C1] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 254.783146][ C1] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 254.783146][ C1] RSP: 0018:fffffe0000036fb8 EFLAGS: 00010086 [ 254.783146][ C1] RAX: 00000000f5dc5b40 RBX: fffffe0000036fb8 RCX: ffffffff88000e87 [ 254.783146][ C1] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 254.783146][ C1] RBP: fffffe0000037120 R08: 0000000000000000 R09: 0000000000000000 [ 254.783146][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 254.783146][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.783146][ C1] FS: 0000000000000000(0003) GS:ffff88802cf00000(0000) knlGS:0000000000000000 [ 254.783146][ C1] CS: 0010 DS: 0000 ES: 0003 CR0: 0000000080050033 [ 254.783146][ C1] CR2: fffffe0000036fa8 CR3: 000000006047f000 CR4: 0000000000340ee0 [ 254.783146][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.783146][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.783146][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 254.783146][ C1] Kernel Offset: disabled